Step-By-Step Guide For Configuring A Two-Node File Server Failover Cluster in Windows Server 2008
Step-By-Step Guide For Configuring A Two-Node File Server Failover Cluster in Windows Server 2008
Abstract
A failover cluster is a group of independent computers that work together to increase the
availability of applications and services. The clustered servers (called nodes) are connected by
physical cables and by software. If one of the cluster nodes fails, another node begins to provide
service (a process known as failover). This guide describes the steps for installing and
configuring a file server failover cluster that has two nodes. By creating the configuration in this
guide, you can learn about failover clusters and familiarize yourself with the Failover Cluster
Management snap-in.
1
This is a preliminary document and may be changed substantially prior to final commercial
release of the software described herein. The information contained in this document represents
the current view of Microsoft Corporation on the issues discussed as of the date of publication.
Because Microsoft must respond to changing market conditions, it should not be interpreted to be
a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any
information presented after the date of publication.
This White Paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES,
EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the
rights under copyright, no part of this document may be reproduced, stored in or introduced into a
retrieval system, or transmitted in any form or by any means (electronic, mechanical,
photocopying, recording, or otherwise), or for any purpose, without the express written
permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any
written license agreement from Microsoft, the furnishing of this document does not give you any
license to these patents, trademarks, copyrights, or other intellectual property.
Microsoft, MS-DOS, Windows, Windows Server, Windows Vista, and Active Directory are either
registered trademarks or trademarks of Microsoft Corporation in the United States and/or other
countries.
2
Contents
Step-by-Step Guide for Configuring a Two-Node File Server Failover Cluster in Windows Server
2008............................................................................................................................................ .4
In this guide................................................................................................................... ...........4
Overview for a two-node file server cluster......................................................................... .........4
Shared folders in a failover cluster......................................................................... ..................6
Requirements for a two-node failover cluster.................................................... ..........................7
Hardware requirements for a two-node failover cluster.............................................. ..............7
Software requirements for a two-node failover cluster.................................... .........................9
Network infrastructure and domain account requirements for a two-node failover cluster.....10
Steps for installing a two-node file server cluster........................................................... ............11
Step 1: Connect the cluster servers to the networks and storage........................................ ...11
Step 2: Install the failover cluster feature.................................................... ...........................13
Step 3: Validate the cluster configuration........................................................ .......................14
Step 4: Create the cluster.................................................................................................. .....16
Steps for configuring a two-node file server cluster.................................................. .................17
Additional references.................................................................................................... .............20
3
Step-by-Step Guide for Configuring a Two-
Node File Server Failover Cluster in Windows
Server 2008
A failover cluster is a group of independent computers that work together to increase the
availability of applications and services. The clustered servers (called nodes) are connected by
physical cables and by software. If one of the cluster nodes fails, another node begins to provide
service (a process known as failover). Users experience a minimum of disruptions in service.
This guide describes the steps for installing and configuring a file server failover cluster that has
two nodes. By creating the configuration in this guide, you can learn about failover clusters and
familiarize yourself with the Failover Cluster Management snap-in interface in
Windows Server® 2008 Enterprise or Windows Server® 2008 Datacenter.
Note
The failover cluster feature is not available in Windows Web Server 2008 or Windows
Server 2008 Standard.
In Windows Server 2008, the improvements to failover clusters (formerly known as server
clusters) are aimed at simplifying clusters, making them more secure, and enhancing cluster
stability. Cluster setup and management are easier. Security and networking in clusters have
been improved, as has the way a failover cluster communicates with storage. For more
information about improvements to failover clusters, see
http://go.microsoft.com/fwlink/?LinkId=62368.
In this guide
Overview for a two-node file server cluster
Shared folders in a failover cluster
Requirements for a two-node failover cluster
Steps for installing a two-node file server cluster
Steps for configuring a two-node file server cluster
Additional resources
4
A failover cluster usually includes a storage unit that is physically connected to all the servers in
the cluster, although any given volume in the storage is only accessed by one server at a time.
The following diagram shows a two-node failover cluster connected to a storage unit.
Storage volumes or logical unit numbers (LUNs) exposed to the nodes in a cluster must not be
exposed to other servers, including servers in another cluster. The following diagram illustrates
this.
Note that for the maximum availability of any server, it is important to follow best practices for
server management—for example, carefully managing the physical environment of the servers,
5
testing software changes before fully implementing them, and carefully keeping track of software
updates and configuration changes on all clustered servers.
The following scenario describes how a file server failover cluster can be configured. The files
being shared are on the cluster storage, and either clustered server can act as the file server that
shares them.
6
Requirements for a two-node failover cluster
To create a failover cluster with two nodes (regardless of the service or application that the nodes
provide), you need the hardware, software, accounts, and network infrastructure described in the
sections that follow.
We recommend that you first use the information provided in this guide in a test lab environment.
A Step-by-Step guide is not necessarily meant to be used to deploy Windows Server features
without the accompanying documentation (as listed in the Additional references section), and it
should be used with discretion as a stand-alone document.
Important
You should use only hardware components that are compatible with Windows
Server 2008.
• Network adapters and cable (for network communication): The network
hardware, like other components in the failover cluster solution, must be compatible with
Windows Server 2008. If you use iSCSI, your network adapters must be dedicated to
either network communication or iSCSI, not both.
In the network infrastructure that connects your cluster nodes, avoid having single points of
failure. There are multiple ways of accomplishing this. You can connect your cluster nodes by
multiple, distinct networks. Alternatively, you can connect your cluster nodes with one network
that is constructed with teamed network adapters, redundant switches, redundant routers, or
similar hardware that removes single points of failure.
Note
If you connect cluster nodes with a single network, the network will pass the
redundancy requirement in the Validate a Configuration Wizard. However, the report
from the wizard will include a warning that the network should not have single points
of failure.
For more details about the network configuration required for a failover cluster, see Network
infrastructure and domain account requirements for a two-node failover cluster, later in this
topic.
Device controllers or appropriate adapters for the storage:
• For Serial Attached SCSI or Fibre Channel: If you are using Serial
Attached SCSI or Fibre Channel, in all clustered servers, the mass-storage
7
device controllers that are dedicated to the cluster storage should be identical.
They should also use the same firmware version.
Note
With Windows Server 2008, you cannot use parallel SCSI to connect the storage
to the clustered servers.
• For iSCSI: If you are using iSCSI, each clustered server must have one or
more network adapters or host bus adapters that are dedicated to the cluster
storage. The network you use for iSCSI cannot be used for network
communication. In all clustered servers, the network adapters you use to connect
to the iSCSI storage target should be identical, and we recommend that you use
Gigabit Ethernet or higher.
For iSCSI, you cannot use teamed network adapters, because they are not supported
with iSCSI.
For more information about iSCSI, see the iSCSI FAQ on the Microsoft Web site
(http://go.microsoft.com/fwlink/?LinkId=61375).
• Storage: You must use shared storage that is compatible with Windows Server 2008.
For a two-node failover cluster, the storage should contain at least two separate volumes
(LUNs), configured at the hardware level. One volume will function as the witness disk
(described in the next paragraph). One volume will contain the files that are being shared to
users. Storage requirements include the following:
• To use the native disk support included in failover clustering, use basic disks,
not dynamic disks.
• We recommend that you format the partitions with NTFS (for the witness
disk, the partition must be NTFS).
• For the partition style of the disk, you can use either master boot record
(MBR) or GUID partition table (GPT).
The witness disk is a disk in the cluster storage that is designated to hold a copy of the
cluster configuration database. (A witness disk is part of some, not all, quorum
configurations.) For this two-node cluster, the quorum configuration will be Node and Disk
Majority, the default for a cluster with an even number of nodes. Node and Disk Majority
means that the nodes and the witness disk each contain copies of the cluster configuration,
and the cluster has quorum as long as a majority (two out of three) of these copies are
available.
8
• Confirm compatibility of the storage: Confirm with manufacturers and vendors that
the storage, including drivers, firmware, and software used for the storage, are
compatible with failover clusters in Windows Server 2008.
Important
Storage that was compatible with server clusters in Windows Server 2003 might not
be compatible with failover clusters in Windows Server 2008. Contact your vendor to
ensure that your storage is compatible with failover clusters in Windows Server 2008.
Failover clusters include the following new requirements for storage:
• Because improvements in failover clusters require that the storage respond
correctly to specific SCSI commands, the storage must follow the standard called
SCSI Primary Commands-3 (SPC-3). In particular, the storage must support
Persistent Reservations as specified in the SPC-3 standard.
• The miniport driver used for the storage must work with the Microsoft
Storport storage driver.
• Isolate storage devices, one cluster per device: Servers from different clusters
must not be able to access the same storage devices. In most cases, a LUN that is used
for one set of cluster servers should be isolated from all other servers through LUN
masking or zoning.
• Consider using multipath I/O software: In a highly available storage fabric, you can
deploy failover clusters with multiple host bus adapters by using multipath I/O software.
This provides the highest level of redundancy and availability. For Windows Server 2008,
your multipath solution must be based on Microsoft Multipath I/O (MPIO). Your hardware
vendor will usually supply an MPIO device-specific module (DSM) for your hardware,
although Windows Server 2008 includes one or more DSMs as part of the operating
system.
Important
Host bus adapters and multipath I/O software can be very version sensitive. If you
are implementing a multipath solution for your cluster, you should work closely with
your hardware vendor to choose the correct adapters, firmware, and software for
Windows Server 2008.
9
Network infrastructure and domain account requirements for a
two-node failover cluster
You will need the following network infrastructure for a two-node failover cluster and an
administrative account with the following domain permissions:
• Network settings and IP addresses: When you use identical network adapters for a
network, also use identical communication settings on those adapters (for example,
Speed, Duplex Mode, Flow Control, and Media Type). Also, compare the settings
between the network adapter and the switch it connects to and make sure that no
settings are in conflict.
If you have private networks that are not routed to the rest of your network infrastructure,
ensure that each of these private networks uses a unique subnet. This is necessary even if
you give each network adapter a unique IP address. For example, if you have a cluster node
in a central office that uses one physical network, and another node in a branch office that
uses a separate physical network, do not specify 10.0.0.0/24 for both networks, even if you
give each adapter a unique IP address.
For more information about the network adapters, see Hardware requirements for a two-node
failover cluster, earlier in this guide.
• DNS: The servers in the cluster must be using Domain Name System (DNS) for
name resolution. The DNS dynamic update protocol can be used.
• Domain role: All servers in the cluster must be in the same Active Directory domain.
As a best practice, all clustered servers should have the same domain role (either
member server or domain controller). The recommended role is member server.
• Domain controller: We recommend that your clustered servers be member servers.
If they are, you need an additional server that acts as the domain controller in the domain
that contains your failover cluster.
• Clients: As needed for testing, you can connect one or more networked clients to the
failover cluster that you create, and observe the effect on a client when you move or fail
over the clustered file server from one cluster node to the other.
• Account for administering the cluster: When you first create a cluster or add
servers to it, you must be logged on to the domain with an account that has administrator
rights and permissions on all servers in that cluster. The account does not need to be a
Domain Admins account, but can be a Domain Users account that is in the
Administrators group on each clustered server. In addition, if the account is not a
Domain Admins account, the account (or the group that the account is a member of) must
be given the Create Computer Objects permission in the domain.
Note
There is a change in the way the Cluster service runs in Windows Server 2008, as
compared to Windows Server 2003. In Windows Server 2008, there is no Cluster
service account. Instead, the Cluster service automatically runs in a special context
10
that provides the specific permissions and privileges that are necessary for the
service (similar to the local system context, but with reduced privileges).
Note
Review Hardware Requirements for a Two-Node Failover Cluster earlier in this guide, for
details about the kinds of network adapters and device controllers that you can use with
Windows Server 2008.
For a failover cluster network, avoid having single points of failure. There are multiple ways of
accomplishing this. You can connect your cluster nodes by multiple, distinct networks.
Alternatively, you can connect your cluster nodes with one network that is constructed with
teamed network adapters, redundant switches, redundant routers, or similar hardware that
removes single points of failure (If you use a network for iSCSI, you must create this network in
addition to the other networks).
For a two-node file server cluster, when you connect the servers to the cluster storage, you must
expose at least two volumes (LUNs). You can expose additional volumes as needed for thorough
testing of your configuration. Do not expose the clustered volumes to servers that are not in the
cluster.
11
To connect the cluster servers to the networks and storage
1. Review the details about networks in Hardware Requirements for a Two-Node
Failover Cluster and Network infrastructure and domain account requirements for a
two-node failover cluster, earlier in this guide.
2. Connect and configure the networks that the servers in the cluster will use.
3. If your test configuration includes clients or a non-clustered domain controller,
make sure that these computers can connect to the clustered servers through at least
one network.
4. Follow the manufacturer's instructions for physically connecting the servers to the
storage.
5. Ensure that the disks (LUNs) that you want to use in the cluster are exposed to
the servers that you will cluster (and only those servers). You can use any of the
following interfaces to expose disks or LUNs:
• The interface provided by the manufacturer of the storage.
• If you are using iSCSI, an appropriate iSCSI interface.
• Microsoft Storage Manager for SANs (part of the operating system in
Windows Server 2008). To use this interface, you need to contact the
manufacturer of your storage for a Virtual Disk Service (VDS) provider
package that is designed for your storage.
6. If you have purchased software that controls the format or function of the disk,
follow instructions from the vendor about how to use that software with Windows
Server 2008.
7. On one of the servers that you want to cluster, click Start, click Administrative
Tools, click Computer Management, and then click Disk Management. (If the User
Account Control dialog box appears, confirm that the action it displays is what you
want, and then click Continue.) In Disk Management, confirm that the cluster disks
are visible.
8. If you want to have a storage volume larger than 2 terabytes, and you are using
the Windows interface to control the format of the disk, convert that disk to the
partition style called GUID partition table (GPT). To do this, back up any data on the
disk, delete all volumes on the disk and then, in Disk Management, right-click the disk
(not a partition) and click Convert to GPT Disk.
For volumes smaller than 2 terabytes, instead of using GPT, you can use the partition
style called master boot record (MBR).
Important
You can use either MBR or GPT for a disk that is used by a failover cluster, but you cannot
use a disk that you converted to dynamic by using Disk Management.
If you purchased software that controls the format or function of the disk, contact the vendor
12
for instructions about how to use that software with Windows Server 2008.
9. Check the format of any exposed volume or LUN. We recommend NTFS for the
format (for the witness disk, you must use NTFS).
If this interface is displayed, under Customize This Server, click Add features. Then
skip to step 3.
2. If the Initial Configuration Tasks interface is not displayed and Server Manager
is not running, click Start, click Administrative Tools, and then click Server
Manager. (If the User Account Control dialog box appears, confirm that the action it
13
displays is what you want, and then click Continue.)
Server Manager
14
Failover Cluster Management snap-in
2. Confirm that Failover Cluster Management is selected and then, in the center
pane under Management, click Validate a Configuration.
15
Step 4: Create the cluster
To create a cluster, you run the Create Cluster wizard.
16
Steps for configuring a two-node file server
cluster
To configure a two-node file server failover cluster, follow these steps:
17
6. Review the text on the first page of the wizard, and then click Next.
18
7. Click File Server, and then click Next.
8. Follow the instructions in the wizard to specify the following details:
• A name for the clustered file server
• Any IP address information that is not automatically supplied by your
DHCP settings—for example, a static IPv4 address for this clustered file
server
• The storage volume or volumes that the clustered file server should use
9. After the wizard runs and the Summary page appears, to view a report of the
tasks the wizard performed, click View Report.
10. To close the wizard, click Finish.
11. In the console tree, make sure Services and Applications is expanded, and
then select the clustered file server that you just created.
12. Under Actions, click Add a shared folder.
The Provision a Shared Folder Wizard appears. This is the same wizard that you would
use to provision a share on a nonclustered file server.
13. Follow the instructions in the wizard to specify the following settings for the
shared folder:
• Path and name.
19
• NTFS permissions (optional).
• Advanced settings for the SMB protocol (optional). SMB is used by
Windows-based clients. The settings include:
- User limits.
- Offline settings (caching).
- Access-based enumeration, described in Shared folders in a failover cluster, earlier
in this guide.
• Whether the NFS protocol will be used, for support of UNIX-based clients
(optional).
14. After completing the wizard, confirm that the clustered file server comes online. If
it does not, review the state of the networks and storage and correct any issues.
Then right-click the new clustered file server and click Bring this service or
application online.
15. To perform a basic test of failover, right-click the clustered file server, click Move
this service or application to another node, and click the available choice of node.
When prompted, confirm your choice.
You can observe the status changes in the center pane of the snap-in as the clustered file
server instance is moved.
Additional references
The following resources provide additional information about failover clusters:
• For more information about iSCSI, see the iSCSI FAQ on the Microsoft Web site
(http://go.microsoft.com/fwlink/?LinkId=61375).
• For information about the improvements in failover clusters as compared to server
clusters in Windows Server 2003, see "What's New in Failover Clusters" on the Microsoft
Web site (http://go.microsoft.com/fwlink/?LinkId=62368).
20