Sqlserver2008R2配置数据库镜像之我的经验总结
一. 相关环境介结。 数据库:Sqlserver2008R2 网络环境:主机、镜像机(阿里云,青岛节点同域),见证机(本公司自己托管在上海) 二. 服务器相关配置。 1. 分别开启三台服务器5022的入站端口。 2. 目标数据库的恢复模式必须为完整,具体操作:企业管理器-数据库
一. 相关环境介结。
数据库:Sqlserver2008R2
网络环境:主机、镜像机(阿里云,青岛节点同域),见证机(本公司自己托管在上海)
二. 服务器相关配置。
1. 分别开启三台服务器5022的入站端口。
2. 目标数据库的恢复模式必须为“完整”,具体操作:企业管理器->数据库右键->属性->选项->恢复模式选择“完整”->确定。
3. 远程连接设置(非必要),具体操作:数据库服务实例->右键->方面->外围应用配置器->RemoteDACEnabled->True->确定。
三.配置服务器域。
1. 给每台服务器(主机、镜像机、见证机)加上FQDN,即设置同样的DNS后缀名。(方法:计算机右键->属性->更改设置->更改->其他->DNS后缀),如:jike.cn,设置后需要重启服务器。
2. 修改每台机的HOST文件,将计算机名和IP绑定,如:
115.10.1.1 SqlHost.jike.cn
115.10.1.2 SqlMirror.jike.cn
210.14.79.98 SqlWitness.jike.cn
提示:SqlHost、SqlMirror和SqlWitness分别为三台服务器的机器名,绝对不能随便起个名。
四. 脚本证书方式配置。
1. 备份还原数据库
-- 主机备份 USE master GO BACKUP DATABASE [TestSync] TO DISK = N'D:\SqlserverMirrorCer\TestSync.bak' WITH FORMAT, INIT, NAME = N'TestSync-Full Database Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10; GO BACKUP LOG [TestSync] TO DISK = N'D:\SqlserverMirrorCer\TestSync.bak' WITH NOFORMAT, NOINIT, NAME = N'TestSync-Transaction Log Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10; GO -- 镜像恢复 USE master GO RESTORE DATABASE [TestSync] FROM DISK = N'D:\SqlserverMirrorCer\TestSync.bak' WITH FILE = 1, NORECOVERY, NOUNLOAD, REPLACE, STATS = 10 GO RESTORE LOG [TestSync] FROM DISK = N'D:\SqlserverMirrorCer\TestSync.bak' WITH FILE = 2, NORECOVERY, NOUNLOAD, STATS = 10 GOView Code
2. 创建证书
------------------------------------------------------------------------ --============================ 主机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --创建证书,并备份 IF EXISTS(SELECT * FROM sys.databases WHERE name='master' and is_master_key_encrypted_by_server=1) OPEN MASTER KEY DECRYPTION BY PASSWORD='PWD_DBMirror986252588'; ELSE CREATE MASTER KEY ENCRYPTION BY PASSWORD='PWD_DBMirror986252588'; GO IF EXISTS(select * from sys.certificates WHERE name='Cert_Host') DROP CERTIFICATE Cert_Host; GO CREATE CERTIFICATE Cert_Host WITH SUBJECT=N'Cert_Host Certificate',START_DATE='20120405',EXPIRY_DATE='20990405'; BACKUP CERTIFICATE Cert_Host TO FILE=N'D:\SqlserverMirrorCer\Cert_Host.cer'; GO --创建镜像端口 IF EXISTS(select * from sys.database_mirroring_endpoints WHERE name='Endpoint_Host') DROP ENDPOINT Endpoint_Host GO CREATE ENDPOINT Endpoint_Host STATE = STARTED AS TCP ( LISTENER_PORT=5022, LISTENER_IP=ALL ) FOR DATABASE_MIRRORING ( AUTHENTICATION=CERTIFICATE Cert_Host, ENCRYPTION=REQUIRED ALGORITHM AES, ROLE=PARTNER ) GO ------------------------------------------------------------------------ --============================ 镜像机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --创建证书,并备份 IF EXISTS(SELECT * FROM sys.databases WHERE name='master' and is_master_key_encrypted_by_server=1) OPEN MASTER KEY DECRYPTION BY PASSWORD='PWD_DBMirror986252588'; ELSE CREATE MASTER KEY ENCRYPTION BY PASSWORD='PWD_DBMirror986252588'; GO IF EXISTS(select * from sys.certificates WHERE name='Cert_Mirror') DROP CERTIFICATE Cert_Mirror; GO CREATE CERTIFICATE Cert_Mirror WITH SUBJECT=N'Cert_Mirror Certificate',START_DATE='20120405',EXPIRY_DATE='20990405'; BACKUP CERTIFICATE Cert_Mirror TO FILE=N'D:\SqlserverMirrorCer\Cert_Mirror.cer'; GO --创建镜像端口 IF EXISTS(select * from sys.database_mirroring_endpoints WHERE name='Endpoint_Mirror') DROP ENDPOINT Endpoint_Mirror GO CREATE ENDPOINT Endpoint_Mirror STATE = STARTED AS TCP ( LISTENER_PORT=5022, LISTENER_IP=ALL ) FOR DATABASE_MIRRORING ( AUTHENTICATION=CERTIFICATE Cert_Mirror, ENCRYPTION=REQUIRED ALGORITHM AES, ROLE=PARTNER ) GO ------------------------------------------------------------------------ --============================ 见证机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --创建证书,并备份 IF EXISTS(SELECT * FROM sys.databases WHERE name='master' and is_master_key_encrypted_by_server=1) OPEN MASTER KEY DECRYPTION BY PASSWORD='PWD_DBMirror986252588'; ELSE CREATE MASTER KEY ENCRYPTION BY PASSWORD='PWD_DBMirror986252588'; GO IF EXISTS(select * from sys.certificates WHERE name='Cert_Witness') DROP CERTIFICATE Cert_Witness; GO CREATE CERTIFICATE Cert_Witness WITH SUBJECT=N'Cert_Witness Certificate',START_DATE='20120405',EXPIRY_DATE='20990405'; BACKUP CERTIFICATE Cert_Witness TO FILE=N'D:\SqlserverMirrorCer\Cert_Witness.cer'; GO --创建镜像端口 IF EXISTS(select * from sys.database_mirroring_endpoints WHERE name='Endpoint_Witness') DROP ENDPOINT Endpoint_Witness GO CREATE ENDPOINT Endpoint_Witness STATE = STARTED AS TCP ( LISTENER_PORT=5022, LISTENER_IP=ALL ) FOR DATABASE_MIRRORING ( AUTHENTICATION=CERTIFICATE Cert_Witness, ENCRYPTION=REQUIRED ALGORITHM AES, ROLE=WITNESS ) GOView Code
3.创建登录用户(把上面三个步骤中备份的证书COPY到每台机,确保每台机都有此三个证书)
-- 把上面三个步骤中备份的证书COPY到每台机,确保每台机都有此三个证书。 ------------------------------------------------------------------------ --============================ 主机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --为镜像机访问主机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Mirror WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Mirror FOR LOGIN Login_For_Mirror; CREATE CERTIFICATE Cert_For_Mirror AUTHORIZATION User_For_Mirror FROM FILE=N'D:\SqlserverMirrorCer\Cert_Mirror.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Host TO Login_For_Mirror; GO --为见证机访问主机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Witness WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Witness FOR LOGIN Login_For_Witness; CREATE CERTIFICATE Cert_For_Witness AUTHORIZATION User_For_Witness FROM FILE=N'D:\SqlserverMirrorCer\Cert_Witness.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Host TO Login_For_Witness; GO ------------------------------------------------------------------------ --============================ 镜像机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --为主机访问镜像机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Host WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Host FOR LOGIN Login_For_Host; CREATE CERTIFICATE Cert_For_Host AUTHORIZATION User_For_Host FROM FILE =N'D:\SqlserverMirrorCer\Cert_Host.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Mirror TO Login_For_Host; GO --为见证机访问镜像机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Witness WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Witness FOR LOGIN Login_For_Witness; CREATE CERTIFICATE Cert_For_Witness AUTHORIZATION User_For_Witness FROM FILE =N'D:\SqlserverMirrorCer\Cert_Witness.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Mirror TO Login_For_Witness; GO ------------------------------------------------------------------------ --============================ 见证机上执行 ============================-- ------------------------------------------------------------------------ USE master GO --为主机访问见证机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Host WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Host FOR LOGIN Login_For_Host; CREATE CERTIFICATE Cert_For_Host AUTHORIZATION User_For_Host FROM FILE=N'D:\SqlserverMirrorCer\Cert_Host.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Witness TO Login_For_Host; GO --为镜像机访问见证机的镜像端口而创建登录和用户,并授予连接权限 CREATE LOGIN Login_For_Mirror WITH PASSWORD=N'PWD_DBMirror986252588'; CREATE USER User_For_Mirror FOR LOGIN Login_For_Mirror; CREATE CERTIFICATE Cert_For_Mirror AUTHORIZATION User_For_Mirror FROM FILE=N'D:\SqlserverMirrorCer\Cert_Mirror.cer'; GRANT CONNECT ON ENDPOINT::Endpoint_Witness TO Login_For_Mirror; GOView Code
4.最后一步开始镜像。
-- 镜像机上执行: -- 建立 主机 合作 ALTER DATABASE [TestSync] SET PARTNER =N'TCP://SqlHost.jike.cn:5022'; -- 主机上执行: -- 建立 镜像机 合作 ALTER DATABASE [TestSync] SET PARTNER=N'TCP://SqlMirror.jike.cn:5022'; -- 建立 见证机 合作 ALTER DATABASE [TestSync] SET WITNESS=N'TCP://SqlWitness.jike.cn:5022';View Code
1. 配置成功后,主体数据为会显示:主体,已同步,镜机库为:镜像,已同步,正在还原...
2. 如果镜像创建或同步失败,可通过企业管理器通过配置界面重新配置(数据库->右键->任务->镜像->配置安全性,可参考此文:http://liulike.blog.51cto.com/1355103/339183)。
五。其它问题或说明。
1. 一台服务器只能有一个端点,即每台服务器只能承担主机、镜像、见证其中一个角色。
2. 配置域和Host很重要,否则问题很多,笔者在此担搁不少时间。
3. 见证服务器必须要做,否则不带自动故障转移的镜像没什么大用。
参考文章:
----------------------------------------------------------------------------------
http://www.cnblogs.com/Joe-T/archive/2012/04/06/2434350.html
http://liulike.blog.51cto.com/1355103/339183