COMP2126: Windows Server Administration 2

Lab#5: Managing and Maintaining DHCP

Preparation
• Save a copy of the Word answer sheet file and record all of your answers and screenshots for the lab into that document
• Ensure your servers have the correct computer names and your vm windows are labeled the same.

SCENARIO

After completing this lab, you will be able to:

▪ Install the DHCP role

▪ Authorize a DHCP Server

▪ Configure split scopes

▪ Configure DHCP Failover

▪ Configure DHCP Name Protection

Estimated lab time: 55 minutes

Exercise 5.1 Installing the DHCP Role

Overview In this exercise, you will install a second adatum.com DHCP server
on LON-SVR1.
Mindset DHCP has been included with Windows for years and is included with
Windows Server 2016 as a server role. Starting with Windows Server
2012, DHCP supports failover capability. In Active Directory Domain
Services (AD DS) environments, domain-joined Windows DHCP servers
must be authorized to service DHCP client requests. By forcing DHCP
servers to be authorized, clients are protected from rogue domain-joined
Windows DHCP servers that might maliciously affect network clients.
Completion time 15 minutes

1. Log on to LON-SVR1 as adatum\administrator with the password of Pa$$w0rd.

2. In Server Manager, click Manage > Add Roles and Features.

Page 1 of 7
 3. In the Add Roles and Features Wizard, on the Before You Begin page, click Next.

4. On the Select installation type page, click Next.

5. On the Server Selection page, click Next.

6. On the Server Roles page, select the DHCP Server option. When you are prompted to add additional
features, click Add Features. Click Next.

7. On the Features page, click Next.

8. On the DHCP Server page, click Next.

9. On the Confirmation page, click Install.

10. When the installation is complete, take a screen shot of the DHCP Manager window by pressing Alt+PrtScr
and then paste it into your Lab05_worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

11. Click Close.

12. In Server Manager, click Tools > DHCP.

13. Maximize the DHCP window.

14. Click, then right-click the lon-svr1.adatum.com node and choose Authorize.

15. To refresh the node, press the F5 key. Alternatively, you can right-click the server node and choose Refresh.

16. When the installation is complete, take a screen shot of the DHCP Manager window by pressing Alt+PrtScr
and then paste it into your Lab05_worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

Close the DHCP console on LON-SVR1; the rest of this lab will completed on LON-DC1.

Exercise 5.2 Configuring Split Scopes

Overview In this exercise, you will configure a DHCP split scope.
Mindset For years, if you wanted high availability, you would use a split-scope
configuration, also known as the 80/20 configuration. Split-scope
configuration uses two DHCP servers, with the same scopes and options.
However, the scopes have complementary exclusion ranges, so that there is
no overlap in the addresses that they lease clients. You do not want the two
servers to distribute the same address to different clients.
Completion time 20 minutes

2
Page 2 of 7
COMP2126: Windows Server Administration 2
1. Log on to LON-DC1 as adatum\administrator with the password of Pa$$w0rd.

2. On LON-DC1, click Tools > DHCP.

3. In the DHCP window, expand the lon-dc1.adatum.com node. Click and then right-click the IPv4 node and
choose New Scope.

4. On the New Scope Wizard, on the Welcome to the New Scope Wizard page, click Next.

5. On the Scope Name page, in the Name text box, type SplitScope. Click Next.

6. On the IP Address Range page, in the Start IP address text box, type 192.168.2.2. In the End IP address text
box, type 192.168.2.254. Click Next.

7. On the Add Exclusions and Delay page, click Next.

8. On the Lease Duration page, click Next.

9. On the Configure DHCP Options page, click Next.

10. On the Router (Default Gateway) page, in the IP address text box, type 192.168.2.1. Click Add and then click
Next.

11. On the Domain Name and DNS Servers page, click Next.

12. On the WINS Servers page, click Next.

13. On the Activate Scope page, click Next.

14. On the Completing the New Scope Wizard page, click Finish.

15. Click the SplitScope scope. Then right-click the SplitScope scope and choose Advanced > Split-Scope.

16. On the DHCP Split-Scope Configuration Wizard, click Next.

17. On the Additional DHCP Server page (see Figure 5-1), click Add Server.

Page 3 of 7
Figure 5-1
Specifying the additional DHCP server

18. In the Add Server dialog box, click Browse.

19. In the Select Computer dialog box, in the enter the object name to select text box, type LON-SVR1 and then
click OK.

20. To close the Add server dialog box, click OK.

21. Back on the Additional DHCP Server page, click Next.

22. On the Percentage of Split page, answer the following question and then click Next.

What is the default percentage split between the Host DHCP

Question Server and the Added DHCP Server role?
1

23. On the Delay in DHCP Offer page, configure the Added DHCP Server delay to 500 ms. Click Next.

24. In the Summary of Split-Scope Configuration page, click Finish.

25. When the split scope is configured, take a screen shot of the Dhcp Split-Scope Configuration Wizard page by
pressing Alt+PrtScr and then paste it into your Lab05_worksheet file in the page provided by pressing Ctrl+V.

4
Page 4 of 7
COMP2126: Windows Server Administration 2

[copy screen shot over this text]

26. Click Close.

Leave the DHCP console open for the next exercise.

Exercise 5.3 Configuring DHCP Failover

Overview In this exercise, you will configure a DHCP Failover using two DHCP
servers.
Mindset Starting with Windows Server 2012, DHCP can replicate lease information
between two DHCP servers for IPv4 scopes and subnets. If one DHCP
server fails or becomes overloaded, the other server services the clients for
the entire subnet.
Completion time 15 minutes

1. On LON-DC1, in the DHCP window, right-click the IPv4 node and choose New Scope.

2. On the Welcome to the New Scope Wizard page, click Next.

3. On the Scope Name page, in the Name text box, type FailoverScope. Click Next

4. On the IP Address Range page, in the Start IP address text box, type 192.168.3.2. In the End IP address text
box, type 192.168.3.254. Click Next.

5. On the Add Exclusions and Delay page, click Next.

6. On the Lease Duration page, click Next.

7. On the Configure DHCP Options page, click Next.

8. On the Router (Default Gateway) page, in the IP address text box, type 192.168.3.1. Click Add and then click
Next.

9. On the Domain Name and DNS Servers page, click Next.

10. On the WINS Servers page, click Next.

11. On the Activate Scope page, click Next.

12. On the Completing the New Scope Wizard page, click Finish.

13. To configure a single scope, click, then right-click the FailoverScope scope and choose Configure Failover.

14. On Configure Failover Wizard, on the Introduction to DHCP Failover page, answer the following question
and then click Next.

Page 5 of 7
 Which scopes are available for DHCP Failover?
Question
2

15. On the Specify the Partner Server to Use for Failover page, in the Partner Server text box, type LON-SVR1
and then click Next.

16. On the Create a New Failover Relationship page, answer the following question. Then in the Shared Secret
text box, type Pa$$w0rd, and click Next.

What is the default load balance percentage?

Question
3

What is the default failover mode?

Question
4

17. Take a screenshot of the Configure Failover wizard by pressing Alt+PrtScr and then paste it into your
Lab05_worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

18. Click Finish.

19. When the scope is configured, click Close.

Leave the DHCP console open for the next exercise.

Lab Challenge Configuring DHCP Name Protection

Overview In this exercise, to help protect against non-Microsoft systems
from overwriting systems that use static addresses, you will
enable DHCP Name Protection.
Mindset If an organization uses only Windows systems that are part of an
Active Directory domain, each computer will have its own unique
computer name, which DHCP registers in DNS on behalf of the
client. Name squatting is when a non-Windows-based computer
registers a name in DNS that is already registered to a Windows-
based computer. To prevent non-Microsoft systems from overwriting
systems that use static addresses, Windows Server 2012 introduced
DHCP Name Protection to prevent these conflicts.
Completion time 5 minutes

6
Page 6 of 7
COMP2126: Windows Server Administration 2
Where can you enable DHCP Name Protection?
Question
5

1. On LON-DC1, using the DHCP console, right-click IPv4 and choose Properties.

2. In the Properties dialog box, click the DNS tab.

3. In the Name Protection section, click Configure. The Name Protection dialog box opens.

4. Click to select the Enable Name Protection option.

5. Take a screen shot of the DHCP console showing the Name Protection dialog box by pressing Alt+PrtScr and
then paste it into your Lab05_worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

6. Click OK to close the Name Protection dialog box and then click OK to close the Properties dialog box.

End of lab.

Page 7 of 7