Solved

AD, DNS, DHCP - Servers in 10.10.50.0/24, Clients in 10.10.49/24

Posted on 2013-05-28
13
853 Views
Last Modified: 2013-07-29
I need to replace server and client IP addresses and still allow old IP addresses to reach the new IP address/host names.

Clients/Workstations be addressed 10.10.49/24 with the gateway 10.10.49.1 (switch 8 is gateway)

Servers will be addressed 10.10.50/24 with gateway 10.10.50.1 (switch 8) is gateway.

To configure domain controllers (two of them) on windows server 2008 with AD, DNS, DHCP:

1. I will keep existing IP address in tcp/ip4 properties but will add the new IP address through advanced TCP/IP settings...
   Set the IP address on domain controller to 10.10.50.4 255.255.255.0. The current gateway is 192.168.101.1.  Do I add 10.10.50.1 as the additional new gateway? on Client workstations; would default gateway be 10.10.49.1 or 10.10.50.1?  

2. in DHCP, to configure the new DHCP Scope for workstations to contact dc1 and dc2 with the new IP address 10.10.50.4 (dc2) and 10.10.50.5 (dc2) to retrieve the an IP of the client subnet- 10.10.49.0/24...
    Do I set the new scope "scope options" wiith:
             Router: the default gateway of the clients 10.10.49.1 or servers 10.10.50.1?
             DNS Servers: the domain controllers new IP: 10.10.50.4; 10.1.50.5?
 
3. The "server options" in DHCP contains currently
       DNS Servers: old/current ip address of dc1 dc2
       DNS domain name: domainname.whatever
       NTP server: the time servers

Will the default gateway on domain controllers be of the severs subnet gateway (10.10.50.1)?  If so,  will clients on the range and DHCP be configured as 10.10.49.1 for the gateway or 10.10.50.1 as the gateway?
0
Comment
Question by:zfish
  • 7
  • 5
13 Comments
 
LVL 4

Expert Comment

by:baller119
Comment Utility
I did not understand what you meant by "switch 8" but I will assume it is a router.

Default gateway = default route: The route to 0.0.0.0/0 (anywhere)

Anything on 10.10.49.0/24 : GW 10.10.49.1
Anything on 10.10.50.0/24 : GW 10.10.50.1
0
 
LVL 24

Expert Comment

by:smckeown777
Comment Utility
To follow what baller119 says, this 'switch8'(lets say its a layer3 switch) - it should be doing the 'routing between different subnets' as well...

What models are these switches?
Don't assign multiple GW's to servers or clients...that is taken care of on the router/switch
0
 
LVL 4

Expert Comment

by:baller119
Comment Utility
Are you putting clients and servers on separate networks because you ran out of IP's on your 192.168.101.0/24 network?
0
 

Author Comment

by:zfish
Comment Utility
OK, so on the domain controller, could I configure the domain controllers with an IP address and gateway of the "server" subnet.. 10.10.50.0/24 GW 10.10.50.1? And in DHCP set it up to distribute 10.10.49.1 to clients for default gateway while still allowing all communication flow to services on domain controllers?  

Yes it's a router rather than a switch.


The main reason I'm placing servers and workstations in a separate subnet but same subnet mask is to prevent broadcast traffic and its been requested by the customer for servers and clients to not be in the subnet.  Main purpose to get out of 192.168.101.0/24 is because we will have multiple locations in the future and directed to do so by regional office.
0
 
LVL 4

Expert Comment

by:baller119
Comment Utility
@zfish your description of your IP setup makes sense. If your router is already configured correctly and you have the correct default gateways being provided to each node on each subnet then it should work as you expect.
0
 

Author Comment

by:zfish
Comment Utility
When I added the IP address to the domain controllers it didn't add the secondary IP address to DNS.  Wherever there is a record containing existing DC IP 192.168.101.4 should I add as well the a second record (reserve, a record, prt, cname, etc) for the new IP? 10.10.50.4 dc1 and .5 for dc2?  

Is it ok for DNS to contain multiple IPs/records to a same host (host would be dc1 and dc2)?

I ask because in the DHCP scope, I added the new-secondary IP of DC1 and DC2 10.10.50.4; 10.10.50.5 with router that the client computers would use which is 10.10.49.1. When adding these IPs it displayed it couldn't locate in DNS to resolve.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 4

Expert Comment

by:baller119
Comment Utility
At this point, you may be having issues with multiple IP's being assigned to the NIC on a DC. I suggest removing the old IPs completely and setting each DC/DNS/DHCP server to a single IP in the new range (10.10.50.4, 10.10.50.5).

You say in the original question you wish to "allow old IP's to reach the new IP address/hostnames" and having the old subnet on your servers is not going to accomplish any benefit.

So, for each DC, set one IP address and if DNS is hosted on the DC, put the same single IP in the primary DNS and leave secondary blank.

I can help with further questions if you need it.
0
 

Author Comment

by:zfish
Comment Utility
If I remove the current IPs from the NIC of the domain controllers and use the new IP address range, the domain controllers then will be using 10.10.50.0/24 with default gateway as 10.10.50.1 while workstations and servers that have not yet transitioned to the new IP; won't they then not be able to communicate with DCs?
0
 
LVL 4

Expert Comment

by:baller119
Comment Utility
What is your transition plan? How long do you plan to keep others on the old IP? You should probably not have dual homed DC's. It is not recommended and can cause strange issues.
0
 

Author Comment

by:zfish
Comment Utility
Transition time could be several months.

servers and domain controllers: new ip 10.10.50.0/24  [old is 192.168.101.x] in same vlan 13
workstations/printers new ip 10.10.49.0/24                   [Old is 192.168.101.x] in same vlan 13

If I do not have the domain controllers assigned with the new IP (10.10.50.x); how would I set DHCP to assign IPs 10.10.49.x to workstations.  
It is configured like the following but it doesn't distribute ips.  If I manually assign the ip I can ping the old IPs but it can't find the dns record.

Scope Options on dc1 (dc2 has no changes done to dhcp as of yet)
003 Router : 10.10.49.1
006 DNS Servers: 10.10.50.4; 10.10.50.5 (currently these IPs are secondary-assigned to same nic of the 192.168.101.x
015 dns domain name: lanactive.directory.domain

For this scope, its set to dynamically update dns a and ptr records only
0
 
LVL 4

Expert Comment

by:baller119
Comment Utility
@zfish, my suggestion is to use your router to route traffic between subnets. DHCP will issue addresses in a subnet for which your router is setup, as long as you setup DHCP relay in the router. I also suggest that you set your new IPs for each server and do not setup more than one subnet per NIC. If some clients need to be on the old subnet 192.x then place them on their own subnet in the router.
0
 

Author Comment

by:zfish
Comment Utility
how do I setup dhcp relay?  the switch is a 3560x
0
 
LVL 4

Accepted Solution

by:
baller119 earned 320 total points
Comment Utility
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

A Cisco router can be configured as a DHCP Server. There are advantages and disadvantages in making your Cisco router work as DHCP Server. Almost all the features for windows DHCP can be configured on Cisco-based DHCP server. Some of the features me…
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
This video discusses moving either the default database or any database to a new volume.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now