DHCP hot standby question

590 views
Skip to first unread message

Denes, Laszlo

unread,
Feb 27, 2024, 2:54:11 PM2/27/24
to ntsys...@googlegroups.com, Denes, Laszlo

Hello Everyone,

 

Theoretically having 2 DHCP servers that each have a scope(s) and point to each other for hot-standby failover. So server 1 has the scope 10.x.x.x and points to server 2 as the standby partner and server 2 has the scope 172.x.x.x. and points to server 1 as the hot standby partner. So if server 1 goes down its 10.x.x.x scope comes up on server 2  and if server 2 goes down then its 172.x.x.x. scope comes up on server 1. So this way all scopes have a live DHCP server and a hot standby partner but only if they go down, i.e. not load balance mode. Any special gotcha’s if we try that, i.e. is it as easy as it seems? LOL! Cheers

 

Many thanks in advance for your time.

 

Regards,

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

The Salvation Army Toronto Grace Health Centre

650 Church Street, Toronto, ON M4Y 2G5

t: 416-925-2251 ext. 214

f: 416-925-3211

lde...@torontograce.org

www.torontograce.org

 

  

 

Exceptional and compassionate care for all.

 

Glen Johnson

unread,
Feb 27, 2024, 3:26:35 PM2/27/24
to ntsys...@googlegroups.com, Denes, Laszlo
I would prefer DHCP replication and load balancing using windows server.  We had that at my previous job and it worked great.  All (15 or so) scopes replicated between 2 servers.

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> on behalf of Denes, Laszlo <lde...@torontograce.org>
Sent: Tuesday, February 27, 2024 2:54:06 PM
To: ntsys...@googlegroups.com <ntsys...@googlegroups.com>
Cc: Denes, Laszlo <lde...@torontograce.org>
Subject: [ntsysadmin] DHCP hot standby question
 
--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/YQBPR01MB10286271D681B8E380C73A4AEBA592%40YQBPR01MB10286.CANPRD01.PROD.OUTLOOK.COM.

Virginia's Community Colleges Alumni

Philip Elder

unread,
Feb 27, 2024, 3:31:10 PM2/27/24
to ntsys...@googlegroups.com

It’s really that easy. The root folder icon in DHCP Management will change to indicate a failover relationship is in play.

 

Both active and passive should have the entirety of the DHCP database on them at any given time.

 

You can keep both partners in DHCP Management to keep an eye on them.

 

Down the road, migrating is really easy too.

 

Philip Elder MCTS

Senior Technical Architect

Microsoft High Availability MVP

E-mail: Phili...@mpecsinc.ca

Phone: +1 (780) 458-2028

Web: www.mpecsinc.com

Blog: blog.mpecsinc.com

Twitter: Twitter.com/MPECSInc

Skype: MPECSInc.

 

Please note: Although we may sometimes respond to email, text and phone calls instantly at all hours of the day, our regular business hours are 8:00 AM - 5:00 PM, Monday thru Friday.

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Denes, Laszlo
Sent: Tuesday, February 27, 2024 12:54
To: ntsys...@googlegroups.com
Cc: Denes, Laszlo <lde...@torontograce.org>
Subject: [ntsysadmin] DHCP hot standby question

 

Hello Everyone,

--

Henry Awad

unread,
Feb 27, 2024, 4:14:32 PM2/27/24
to ntsys...@googlegroups.com
Any reason why you don't want to setup failover and load balancing on your DHCP servers (if you're using Windows Server)? That would give you the best of both worlds since both servers can issue leases for all your scopes if you enable failover on all of them. You can also select which scopes you want to setup failover for if you don't want to do that for all scopes. We have it setup for over 50 scopes and haven't had any hiccups in several years.

Philip Elder

unread,
Feb 27, 2024, 4:18:00 PM2/27/24
to ntsys...@googlegroups.com

I don’t like split scenarios in a recovery situation no matter what service or workload we’re talking about.

 

DHCP? Go 100% Active/Passive it just works. BTDT

* Plus we’re not having to manage those split scopes.

FSMO Roles? Put them all on one DC. BTDT

Time? Put it on the PDCe and make all other DCs secondary to it BTDT

 

One stop makes recovery so much more simple if there’s a blotto situation.

 

Philip Elder MCTS

Senior Technical Architect

Microsoft High Availability MVP

E-mail: Phili...@mpecsinc.ca

Phone: +1 (780) 458-2028

Web: www.mpecsinc.com

Blog: blog.mpecsinc.com

Twitter: Twitter.com/MPECSInc

Skype: MPECSInc.

 

Please note: Although we may sometimes respond to email, text and phone calls instantly at all hours of the day, our regular business hours are 8:00 AM - 5:00 PM, Monday thru Friday.

 

Henry Awad

unread,
Feb 27, 2024, 4:27:00 PM2/27/24
to ntsys...@googlegroups.com
The recovery for DHCP would be the same in both scenarios but you actually get to leverage the secondary server and more importantly know that all the scopes and options are setup correctly and they work. 



Philip Elder

unread,
Feb 27, 2024, 4:29:45 PM2/27/24
to ntsys...@googlegroups.com

We’ve had situations where the active or the passive partner in a DHCP failover partnership failed. There were no issues and rebuilding the failed partner and getting failover up and running again same.

 

It’s more of a simplicity thing for me (KISS). Active/Passive is simpler to manage than a split scope setup would be IMO.

Exceptional and compassionate care for all.

 

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/YQBPR01MB10286271D681B8E380C73A4AEBA592%40YQBPR01MB10286.CANPRD01.PROD.OUTLOOK.COM.

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/bd11748d89384fedb9ca35886fd486d6%40MPECSInc.Ca.

Denes, Laszlo

unread,
Feb 28, 2024, 7:57:29 AM2/28/24
to ntsys...@googlegroups.com

Amazing cheers for that

 

Thank you in advance for your time.

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

Michael B. Smith

unread,
Feb 28, 2024, 8:14:18 AM2/28/24
to ntsys...@googlegroups.com

And just a fun fact here – you can export your DHCP configuration to text files for backup – and you can recover from those text files to another server.

 

Simplifies DR situations enormously…

Kurt Buff

unread,
Feb 28, 2024, 9:01:17 AM2/28/24
to ntsys...@googlegroups.com
We do that weekly for just that reason, but only the reservations. Doesn't seem worth it to extract the ephemeral leases.

Kurt

Denes, Laszlo

unread,
Feb 28, 2024, 9:24:32 AM2/28/24
to ntsys...@googlegroups.com

Yeah regular backups here as well

 

Thank you in advance for your time.

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

t: ext. 214

lde...@torontograce.org

 

Exceptional and compassionate care for all.

Denes, Laszlo

unread,
Mar 28, 2024, 11:53:44 AM3/28/24
to ntsys...@googlegroups.com, Denes, Laszlo

SO I tested and setup (thanks for tip again to turn off DHCP service to force failover and it worked great) failover from one server (has all scopes) to another server which now acts as hot standby partner to become active if source DHCP stops leasing for default 1 hour. I went with default values. I can see all scopes replicated with lease information etc. on the standby partner. It works. The only oddity is a yellow triangle with exclamation mark IPv4 which normally indicates 90% + scope lease full but I checked stats on each of the scopes and none of them are even close to be being that full. Thoughts?

 

 

It shows on both DHCP servers but only if I expan the IPv4 which is green otherwise

Wright, John M

unread,
Mar 28, 2024, 1:54:21 PM3/28/24
to ntsys...@googlegroups.com, Denes, Laszlo

At the link below, someone with a similar problem resolved it by deactivating a scope, then re-activating it.  A reply in the thread also lists two other possibilities.

 

Blue Exclamation MArk on DHCP IPv4 scope - Microsoft Q&A

 

--

John Wright

IT Support Specialist

1800 Old Bluegrass Avenue, Louisville, KY 40215

502.708.9953

Please submit IT requests to Hazelwoo...@bluegrass.org

24 Hour Helpline 1.800.928.8000

  

CONFIDENTIALITY NOTICE: This message contains confidential information and is intended only for the individual(s) addressed in the message. If you are not the named addressee, you should not disseminate, distribute, or copy this e-mail. If you are not the intended recipient, you are notified that disclosing, distributing, or copying this e-mail is strictly prohibited.

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Denes, Laszlo
Sent: Thursday, March 28, 2024 11:54 AM
To: ntsys...@googlegroups.com
Cc: Denes, Laszlo <lde...@torontograce.org>
Subject: [ntsysadmin] DHCP hot standby question

 

This message is from an external sender.

--

You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.

[CAUTION] Do not click on links or open attachments unless you recognize the sender and know the content is safe.
If you believe this is a malicious email, please forward it the local IT team and click the Report Message button in Outlook.

 

Henry Awad

unread,
Mar 28, 2024, 1:56:27 PM3/28/24
to ntsys...@googlegroups.com
I've seen that happen a few times especially when wireless Maps reboot and the scope does fill up temporarily but by the time I checked, the issue was resolved but the scope still had the yellow triangle. Unless it's a real issue, do you really want to waste time trying to understand why it still shows the yellow triangle? If there was any logic to it, it would clear itself. If you have a monitoring tool or SIEM, you can setup an alert when the scope goes above 80 or 90% utilization and confirm that what I described is actually happening or for peace of mind since you will get better alerting than relying on the yellow triangle visibility.

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.

Denes, Laszlo

unread,
Mar 28, 2024, 2:03:59 PM3/28/24
to Wright, John M, ntsys...@googlegroups.com

Fantastic will try that. Cheers for fast answer 😊

 

Thank you in advance for your time.

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

t: ext. 214

lde...@torontograce.org

 

Denes, Laszlo

unread,
Mar 28, 2024, 2:40:53 PM3/28/24
to ntsys...@googlegroups.com

Yeah 1 wireless scope is 92% right now but that will clear once people go home

Cheers again for insight

 

Thank you in advance for your time.

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

t: ext. 214

lde...@torontograce.org

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Henry Awad
Sent: Thursday, March 28, 2024 1:56 PM
To: ntsys...@googlegroups.com

Jim Behning

unread,
Mar 29, 2024, 10:24:07 AM3/29/24
to ntsys...@googlegroups.com
I am drawing a half blank.  I went to bed 2 hours late after fighting a Sage 50 update. I had this issue a few months back. I cannot recall if it was my Fortigate firewall was jamming up my Server 2022 DHCP or something else. Something was eating up all my IPs.

Nope. Different network. It was something to do with arp-reply, NAT and an IPSec tunnel. Ate up all my IPs in DHCP on the firewall.


Reply all
Reply to author
Forward
0 new messages