2012 R2 Hyper-V Replica and Cross Domain

Customer would like to user Hyper-V Replica, but their local site and DR site are different domains.
I know we need certificate. Is there any guide for this? I didn't find any configuration document, thanks.

Hi Sir,
Please refer to the similar thread :
https://social.technet.microsoft.com/Forums/windowsserver/en-US/420d239c-0475-480f-aa9c-c094d9ae226b/server-2012-hyperv-replication-cross-site-and-cross-domain?forum=winserverhyperv
Also the article below is a lab test about hyper-v replica based on certificate :
https://social.technet.microsoft.com/Forums/en-US/c3e309b6-1d5d-4e52-b859-cf36bd5af47d/forum-faq-how-to-implement-hyperv-replica-in-workgroup-environment?forum=winserverhyperv
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Similar Messages

Server 2012: Enabling Hyper-V Replica Site to Site Failure

We recently installed Server 2012 Data Center with Hyper-V on a two servers at two different sites: Main Site and DR Site.
Hyper-V is enabled and working great at both sites on these servers and now trying to configure Hyper-V replica gets us this result:
Some of the items we made sure to verify:
Enabled Firewall rules for inbound rules on Port 80. (Hyper-V Replica HTTP Listener) (Both Sites)
Modified ASA Firewall for HTTP port 80 and can run a packet trace from site to site.
Ping works fine in communication between servers
Both are in the same domain
Within the same Trust Group
Same default storage location and can view the folder from each location
So I am not sure what we are missing, but is there another port that needs to be open if we are going through HTTP because after starting to configuring the replica another message shows that "Could not get the configuration details of the specified server."
Searching around on TechNet didn't show any resolution for this, but if anyone would have some additional tips to try to troubleshoot that would be greatly appreciated!
Thank you!
-Jeff

Hi All,
I am facing the same issue, Please let me the solution... I have given permission to user account at Local Groups in both nodes of Primary Site and DR Site.. and Windows Firewall is also off, IP Subnet is Different at both End...
Brief Description of Infrastructure.
We have Setup Windows Cluster 2012 Failover Cluster in Both Sites ( primary and DR) with the help of mentioned links.
http://www.thomasmaurer.ch/2012/07/hyper-v-replica-the-game-changer/
http://kristiannese.blogspot.in/2012/03/hyper-v-replica-by-example-part-one.html
Now, We want to cross-check Hyper-V Replica functionality but it is saying that Port 80 is not opened, Need Suggestion on same.
Windows Firewall inbound rules is already set as per above links.
Question: From where to where we need to open port 80 means which nodes/cluster/Hyper-V Broker ? As per mentioned cases.
Like,
Case 1. From Hyper-V broker of Primary Site to Hyper-V Broker of DR Site
Case 2: From Physical IP Address of Both Servers at Primary Site to Physical IP of Both Server at DR Site.
Case 3: From Cluster IP Address of Primary Site to Cluster IP of DR Site.
Case 4. From Physical IP Address of Primary Site to Hyper-v Replica Broker of DR Site.
Case 5. Port 80 need to open between Both End for Physical IP’s, Hyper-V Replica Broker and Cluster IP.
Kindly suggest on urgent basis.
Note: It is working fine in same IP Subnet, only change with different Subnet.
Please suggest from which IP to which IP , port 80 Need to be open in Mentioned scenerio.
Primary Site.
Host 1 IP address : 10.25.135.25
Host 2 IP address : 10.25.135.26
Cluster IP Address : 10.25.135.27
Hyper-V Replica Broker Role : 10.25.135.28
DR Site
Host 1 IP Address : 10.103.48.100
Host 2 IP Address : 10.103.48.101
Cluster IP address : 10.103.48.27
Hyper-V Replica Broker Role: 10.103.48.28
I hope , now you can help me.
Thanks
Kirpal Singh

Question for "Hyper-V replica" and "replica server"

On the replica server, is it possible to have and operate other VMs, that are not replicas to existing VMs ?

Hello DimiterS,
Yes, sure you can run VM workloads on both Hyper-V hosts which are participating in Hyper-V Replica and vice versa.
For example, you can have DC01 on HV01 and DC02 on HV02 and then replicate DC01 to HV02 and DC02 to HV01.
No, you cannot have replication from Hyper-V 2012 to Hyper-V 2012 R2, you need to maintain the same Windows Server version on the physical host.
One advise, I would strongly recommend you to exclude the Paging File disk from replication, you can change the location of the System Page File inside the Guest OS to another disk/volume and then exclude it during the replication wizard, this will help
to reduce the replicated traffic and I/O since the paging files are constantly changing. More information
here.
Hope this help.
Regards,
Charbel Nemnom
MCSA, MCSE, MCS, MCITP
Blog: www.charbelnemnom.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark
as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

(Request for:) Best practices for setting up a new Windows Server 2012 r2 Hyper-V Virtualized AD DC

Could you please share your best practices for setting up a new Windows Server 2012 r2 Hyper-V Virtualized AD DC, that will be running on a new WinSrv 2012 r2 host server. (This
will be for a brand new network setup, new forest, domain, etc.)
Specifically, your best practices regarding:
the sizing of non virtual and virtual volumes/partitions/drives,
the use of sysvol, logs, & data volumes/drives on hosts & guests,
RAID levels for the host and the guest(s),
IDE vs SCSI and drivers both non virtual and virtual and the booting there of,
disk caching settings on both host and guests.
Thanks so much for any information you can share.

A bit of non essential additional info:
We are small to midrange school district who, after close to 20 years on Novell networks, have decided to design and create a new Microsoft network and migrate all of our data and services
over to the new infrastructure . We are planning on rolling out 2012 r2 servers with as much Hyper-v virtualization as possible.
During the last few weeks we have been able to find most of the information we need to undergo this project, and most of the information was pretty solid with little ambiguity, except for
information regarding virtualizing the DCs, which as been a bit inconsistent.
Yes, we have read all the documents that most of these posts tend point to, but found some, if not most are still are referring to performing this under Srvr 2008 r2, and haven’t really
seen all that much on Srvr2012 r2.
We have read these and others:
Introduction to Active Directory Domain Services (AD DS) Virtualization (Level 100),
Virtualized Domain Controller Technical Reference (Level 300),
Virtualized Domain Controller Cloning Test Guidance for Application Vendors,
Support for using Hyper-V Replica for virtualized domain controllers.
Again, thanks for any information, best practices, cookie cutter or otherwise that you can share.
Chas.

Hyper-V Replica Doesn't Seem to Replicate Expanded VHDX File?

I'm running Microsoft Windows Server 2012 R2 Essentials as a VM on Microsoft Hyper-V Server 2012 R2 (Server Core). I am using Hyper-V replica and extended replication to copy the Essentials VM to two backup Hyper-V servers. This has been working
for months.
This evening my 2 Tb VHDX used by Essentials VM was nearly out of space. I took down the VM and expanded the VHDX to 4 Tb. Then I restarted Essentials and used Disk Manager to allocate the new 2 Tb to give me a 4 Tb of space for Essentials to use.
The primary VM seems to be working normally.
But Hyper-V replication doesn't seem to be functioning correctly. I'm wondering if I'll need to delete the replication and start over since the size of the VHDX increased compared to the original configuration?
When I try and get replication to resume (from primary to secondary) I am prompted to resync which I have attempted many times. The primary creates a snapshot and then after a few moments the snapshot is merged back into the primary VM. But the VHDX on the
secondary still shows it is 2 Tb in size. So the resynchronization doesn't seem to have completed correctly? Plus I have the option to "Resume Replication" from the primary which also implies the prior resyncrhonization failed.
I haven't found any error messages using Server Manager to explain why the resync seems to fail.
At one point I found I was able to resync from the secondary to the tertiary server. I don't know what that actually accomplished, but both still have a 2 Tb VHDX instead of the 4 Tb that should now be available.
Any ideas on how to get replica and extended replica to work without having to delete and start replication over from the beginning?
Thanks for any assistance.
Theokrat

There was an error message that I'd overlooked and unfortunately this tells me I'll have to delete and restart replication from the beginning.
Cannot perform operation for virtual machine 'Windows Essentials 2012 R2' as virtual size of one or more virtual hard disks are different between primary and Replica servers. Delete and re-enable replication. (Virtual machine ID xxxxxxx)
Theokrat

Cannot apply Hyper v Replica ip failover. [RESOLVED]

Hello,
I'm using Hyper with replica server. I have two hosts in Windows Server 2012 with hyper v installed and last integration installed both sides on each VM.
I have set up the failover ip on each side, and when I try to failoer a machine evryhting work good execpt the ip failover... I have this error :
« xxxx» n’a pas pu appliquer les paramètres IP à l’adaptateur « {6f71b925-f7d3-4f7a-b987-ca787eca5643} » : Erreur non spécifiée (0x80004005). (ID d’ordinateur virtuel 3B423647-943C-444C-9E2A-E8C24973B643)
English : « xxxx»cannot apply ip settings to the adaptor« {6f71b925-f7d3-4f7a-b987-ca787eca5643} » : non specified error (0x80004005). (ID d’ordinateur virtuel 3B423647-943C-444C-9E2A-E8C24973B643)...
+
System
Provider
[ Name]
Microsoft-Windows-Hyper-V-Integration-KvpExchange
[ Guid]
{82D60869-5ADA-4D49-B76A-309B09666584}
EventID
4132
Version
0
Level
2
Task
0
Opcode
0
Keywords
0x8000000000000000
TimeCreated
[ SystemTime]
2013-12-14T15:02:24.884325200Z
EventRecordID
359
Correlation
Execution
[ ProcessID]
4192
[ ThreadID]
1368
Channel
Microsoft-Windows-Hyper-V-Integration-Admin
Computer
xxxx
Security
[ UserID]
S-1-5-83-1-994195015-1145869372-3269995166-1136030537
UserData
VmlEventLog
VmName
xxxServer
VmId
3B423647-943C-444C-9E2A-E8C24973B643
String
{6f71b925-f7d3-4f7a-b987-ca787eca5643}
ErrorCodeString
%%2147500037
ErrorCode
0x80004005
Is someone can help me, I'm stucked for one week now and cannot find any solutions... Thank you very much...

Hi,
I am glad that this issue is solved. Thank you very much for your sharing.
This solution you provided will help lots of people who have similar issues.
Please feel free to ask us if there are any issues in the future.
Best Regards,
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Windows Server 2012 R2 Hyper V on a SBS 2011 Domain replication failure

I have a SBS 2011 Domain which I am adding two 2012 R2 Standard servers in order to facilitate virtualization and consolidate physical servers. I have the two 2012 R2 servers up and running and a test server running virtually on Hyper-V. I want
to test replication from one Hyper-V host to the other, however, I am unable to setup Kerberos delegation in the SBS 2011 AD domain. Specifically, the Service Type of Microsoft Virtual System Migration Service is not listed. CIFS is available,
however, there are no Service Types having to do with Hyper-V available.
I have upgraded the AD using adprep from the 2012 R2 installation disc, however, this has not added the service types.
Thank you in advance for the help!

Hi Justin,
Thank you for the information. I had originally reviewed the article you mentioned in your reply, however, this did not work for me. It accurately described the problem I am having, however, the solution did not work.
I did a little review of the syntax of the command SETSPN and found that the article referenced above has a "/" instead of a "\" in the command line. When I modified my syntax to reflect using the forward slash, the command seemed to processed
correctly, however, when I go back to the delegation steps, the service name is still not there. I did verify the service was registered properly by listing out all the SPN registrations.
Clarifying Question: Based on the command I ran to add this Service, I am wondering if I used the correct servers. Basically, I have the following:
Server 1 - SBS 2011 domain controller
Server 2 - 2012 R2 Hyper-V Server
Server 3 - 2012 R2 Hyper-V Server
I want to setup this Kerberos delegation for CIFS and Microsoft Virtual System Migration on Server 2 and 3 and am setting this up using ADUC on Server 1. I ran the SETSPN command on Server 1 for Server 1 - was this the correct thing to do or should
I have an SPN entry for Server 2 and/or 3?
Sorry for what is probably a very basic question.
Thank you again for your help.

Hyper-v 2012 R2 Live migration issue in 2003 Domain function Level

hi Team ,
i recently build 2012 R2 Hyper-v Cluster with three node. Everrything working fine with out any issue . Cluster working also fine. Later i came across one issue when tried to Live migration virtual machine from one host to another . it failed all the time
while quick migration is working . i gone through few articles and find it is known issue with hyper-v 2012 R2 where domain functional level is set to 2003 . although they have provided Hotfix but no solution.
http://support.microsoft.com/kb/2838043
Please let me know if any one face similar issue and able to resolve by any hotfix. My host are updated .
Thanks
Ravindra
Ravi

Hi Ravi1987,
The KB2838043 is applied for Server 2012 node, Could you offer us the related cluster error event id, or you can refer the following article to check your cluster
network binding order is correct or not.
Configuring Windows Failover Cluster Networks
http://blogs.technet.com/b/askcore/archive/2014/02/20/configuring-windows-failover-cluster-networks.aspx
You can try to install recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters first, then monitor this issue again.
The KB download:
Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters
http://support.microsoft.com/kb/2920151
More information:
Windows Server 2008 R2 Live Migration – “The devil may be in the networking details.”
http://blogs.technet.com/b/askcore/archive/2009/12/10/windows-server-2008-r2-live-migration-the-devil-may-be-in-the-networking-details.aspx
I’m glad to be of help to you!

Cant create replica and Hyper V virtual machine management service slow shutting down

Hi,
I cant create replica and Hyper V, I go through the process and all looks good it even starts to create the hard disk but it stops at 4096K and the wizard just keeps going.
The management console is also slow or wont load virtual machines - stuck on loading virtual machines
The Hyper V virtual machine management service slow shutting down over 30 minutes on re boot of Hyper V core 2012 R2
Any ideas ?

Hi Sir,
I assume that you have a standalone hyper-v server 2012R2 and you are using hyper-v manager to manage the hyper-v host .
Which system you are using to manage hyper-v host , win8 or win8.1 or other ?
Have you created VMs on the HOST ?
I would suggest you to create vhd or someother operation on hyper-v host directly to check the result .
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Problem with Cross-domain SSO, NTLM and ITS to R/3

Hello,
We are using EP 6.0.13.0 on a Windows environment. We have an ITS running WebGUI/ESS/MSS in another domain and that is the same domain where the R/3 and BI systems reside. We have configured NTLM authentication using IIS web server 6.0 and the IISProxy 1.6.2. We have configured SSO with the backends using the same ID as in the MS-ADS. Almost everything works fine.
The problem is that when we use the NTLM logon VIA the IIS to the portal, and then navigate to a WebGUI service transaction we are prompted for login. When we refresh the portal screen and try again - it works.
We have configured the mdc.hosts and are using the sendSAPSSO2Cookie.asp to generate the cross-domain logon ticket.
I have read that ITS may require the PAS be set up but I thought that was only used when you are going directly to the ITS (leveraging the NTLM authentication) - not when you are going through the portal.
Does anyone have some experience using ALL of the SSO features (i.e. SSO, cross-domain support, ITS, windows integrated authentication)?
We have though about the relax option for the domain but it does not apply as our domains are:
SERVER1.domain1.com and SERVER2.domain2.com
... so relaxing would not help unless we relaxed to the ".COM" which is unreasonable.
My regards,
Judson Maizels

Hi JUDSON
well i'll give one easy solution
make a alias under host file reside in winnt\system32\drivers\etc directory which has same domain name
i.e
SERVER1.domain1.com server1.mydomain.com
SERVER2.domain2.com server2.mydomain.com
it's works in my schenario we have a same system landscape
as you
regards,
kaushal

2012 R2 Hyper-V Cluster two node design with abundance 1Gbps NICs and FC storage

Hello All,
First post so please be gentle!
We are currently in the process of building/testing the upgrade of two node 2012 R2 Hyper-V cluster.
Two hosts built with Datacentre 2012 R2 which will host approx. 30 VM's.
Shared storage will be fault tolerant FC- connection.
10, (yes 10!) 1Gbps NICs are available, Intel i350.
trying to decide on teaming interfaces using native LBFO and the 2008 'style' of using un-converged networking, or teaming up most interfaces and using QoS. Can find many/numerous examples of using 10Gbps NICs and converged, however 10Gbps networking
isn't an option right now.
recommendations appreciated.
thanks

Hi Sir,
>>trying to decide on teaming interfaces using native LBFO and the 2008 'style' of using un-converged networking, or teaming up most interfaces and using QoS.
The following link detailed the teaming configuration and it's applicable scenario (server 2012):
http://www.aidanfinn.com/?p=14039
Also please refer to the document for 2012R2 LBFO :
http://www.microsoft.com/en-us/download/details.aspx?id=40319
In server 2012R2 , there is a new setting "Dynamic" for "load banacing mode " and it is recommended to use Dynamic for "Load banacing mode" :
If you can accept 1GB max bandwidth for each VM I would suggest you to use LBFO mode : Independent/dynamic/None(All adapter active) .
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Cross domain policy file and BitmapData

Hey guys and gals, I'm having an issue with a Security error
when trying to access photos from an external site. I have a client
who is at siteA.com, who wants to load in photos from siteB.com,
siteC.com, and probably 100 other sites. He has permission to do so
from the other sites, but doesn't want to go through all the
trouble of asking each site to post a cross-domain policy file.
Please correct me if I'm wrong, but the way I understand it is, if
you want to simply load an image into a Loader object within a swf,
you're ok, but if you want to access the BitmapData, you will then
get a security error? My snippet of code that I believe is causing
the security error is
public function imageLoaded(e:Event):void {
var image:Bitmap = Bitmap(e.target.loader.content);
image.smoothing = true;
imageContainer.addChild(e.target.loader);
As you can tell, the reason why I want to access the Bitmap
itself is to apply smoothing. That is my main concern, I want to be
able to apply smooth transitions to these pictures that are loaded
in from external sites. My main goal is to load images externally,
then apply smooth transitions, so if you know of a way to get
around the security violations, that would be great. The only
work-around we have for this is to write a script that will load
all the images from the external sites onto the local server, as
this will be less work than getting the cross-domain policy file on
each server (if that's what it takes). Thanks in advance for
anybody who can shed some light on the subject.

If I understand you correctly, a 'helper' swf would be on the
site where the images are held, much like a cross-domain policy
file? I don't understand how that would be much different than
getting the external sites to add a cross-domain policy file on
their server. It sounds easier to just throw the cross-domain
policy file on the external site's server with '*' for the path of
allowed directories to load images from. I'm pretty new to the
cross-domain security issue, so I'm not sure. I don't understand
why it's a security risk to access the pixels of an image either...
anybody know about that? Just trying to figure out where to go from
here on this project. Thanks for the reply GWD, still looking for
some more feedback.

How and when to load cross-domain.xml for web services.

I'm accessing some 3rd party web services and so I need them to have a cross-domain.xml file, which they have done.
In order to access their web services, am I correct that I need to load the cross-domain.xml file they put on their web server, and if so, is my code to do so below correct, which I put in my creationComplete handler function?
Note, of course the IP address in my code is not 0.0.0.0.
Do I need all these lines, and am I doing this correctly?
Currently I am getting a SecurityErrorEvent.
Security.allowDomain("0.0.0.0");
Security.loadPolicyFile("http://0.0.0.0/crossdomain.xml");
var request:URLRequest = new URLRequest("http://0.0.0.0/crossdomain.xml");
var loader:URLLoader = new URLLoader();
loader.addEventListener(Event.COMPLETE, policyLoaded);
loader.addEventListener(IOErrorEvent.IO_ERROR, policyIOError);
loader.addEventListener(SecurityErrorEvent.SECURITY_ERROR, policySecurityError);
loader.load(request);

Okay, I found that when I put the crossdomain.xml file at the root of my web site file area my hosting company provides, I do not specifically need to load the crossdomain.xml file.
But if I want finer control over who has access to what, and I put the crossdomain.xml file in the same directory as my Flex app SWF file, what lines of the following code (or additional lines I don't know about) should I put in my app creationComplete handler function to load the crossdomain.xml file?
Note, of course the IP address in my code is not 0.0.0.0.
Do I need all these lines, and am I doing this correctly?
Security.allowDomain("0.0.0.0");
Security.loadPolicyFile("http://0.0.0.0/myAppFolder/crossdomain.xml");
var request:URLRequest = new URLRequest("http://0.0.0.0/myAppFolder/crossdomain.xml");
var loader:URLLoader = new URLLoader();
loader.addEventListener(Event.COMPLETE, policyLoaded);
loader.addEventListener(IOErrorEvent.IO_ERROR, policyIOError);
loader.addEventListener(SecurityErrorEvent.SECURITY_ERROR, policySecurityError);
loader.load(request);

On a game website I keep getting a window that says cross domain receiver page and I cant get beyond it. What should I do?

'I am trying to play games on a website that requires the use of pop0ups. I have attempted to allow pop0ups on that website and now I get a window named "Cross-Domain Receiver Page". Its a blank page and I cannot go any further on the web-site. It just freezes there. Could you tell me how to get past this annoyance?

Having the same issue here. I unfortunately purchased a book on iTunes, then went to download iBooks, but can't due to their recent update/upgrade. My kids iTouchs are all 6.1.5 , So I'm guessing that if you did not have iBooks previously purchased that you are now S.O.L. if you want to read a book on your iPod??
I am rather frustrated that I spent money on a book that they can't read.
Is there another app that will let them read it?

Windows 2012 R2 Hyper-V event id's 20144 and 15130

Windows 2012 R2 Hyper-V.
After installing the May 2014 MS updates we can no longer start any of the guest VM's. When attempting to start a VM the following is logged in the event logs:
Event id 20144 from Hyper-V-VMMS "Failed to start the virtual machine XYZ' because one of the Hyper-V components is not running" and
Event id 15130 from Hyper-V-VMMS "XYZ' failed to start"
We've looked at http://support.microsoft.com/kb/2761004/en-us and as far as we see the I/O verification option in Driver Verifier is disabled.   We also uninstalled the May
2014 updates that we applied just before the problem started but this did not make a difference.
Help please.

Hi,
I don’t found the similar issue when update, but from the event id, it seems is the incompatible hardware driver, please try to update all your hardware driver and firmware.
Or you can try the following example command to confirm your Hyper-V service is running or not.
=================================================
C:\Users\Administrator>sc queryex vid
SERVICE_NAME: vid
TYPE
: 1 KERNEL_DRIVER
STATE
: 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE    : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT         : 0x0
WAIT_HINT
: 0x0
PID
: 0
FLAGS
C:\Users\Administrator>sc queryex vmbus
SERVICE_NAME: vmbus
TYPE
: 1 KERNEL_DRIVER
STATE
: 1 STOPPED
WIN32_EXIT_CODE    : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT         : 0x0
WAIT_HINT
: 0x0
PID
: 0
C:\Users\Administrator>
===========================================
The related KB:
You cannot start Hyper-V virtual machines after you enable the I/O verification option on a Hyper-V host computer that is running Windows Server 2012 or Windows 8
http://support.microsoft.com/kb/2761004/en-us
The similar thread:
Hyper-V - 'Failed to start the virtual machine 'test' because one of the Hyper-V components is not running.'
http://social.technet.microsoft.com/Forums/windowsserver/en-US/d7e13a44-a9c3-4cb6-b45a-6b347f32b97c/hyperv-failed-to-start-the-virtual-machine-test-because-one-of-the-hyperv-components-is-not?forum=winserverhyperv
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

2012 R2 Hyper-V Replica and Cross Domain

Similar Messages

Maybe you are looking for