工作组模式下SQL Server 2008 R2 数据库镜像

 

目的:实现关键数据库的热备和故障自动切换。

环境:Win2008_R2_X64,SQLServer2008_R2_X64,WorkGroup网络模式。

数据库:people

主机:192.168.1.3

镜像机:192.168.1.110

见证机:192.168.1.111

准备工作:

  1. 打开每个实例的RemoteDACEnable.

    方法:SSMS选中实例右键Facets(方面)在Facet列表选中"Surface area configuration"设定"RemoteDacEnabled"为true。    

  2. 在每台Server的防火墙入站规则中添加镜像所需端口(我用的是5022).

    方法:开始控制面板Windows防火墙高级设置入站规则新增规则    

  3. 对主机的people数据库做一个全备和事务日志备份并将其COPY到镜像机上用Replace,NoRecovery选项恢复。

    主机备份:

    USE master

    GO

    BACKUP DATABASE [people] TO DISK = N'D:\people.bak'

    WITH FORMAT, INIT, NAME = N'people-Full Database Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10;

    GO

    BACKUP LOG [people] TO DISK = N'D:\people.bak'

    WITH NOFORMAT, NOINIT, NAME = N'people-Transaction Log Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10;

    GO

镜像恢复:

USE master

GO

RESTORE DATABASE [people] FROM DISK = N'F:\people.bak'

WITH FILE = 1,

NORECOVERY, NOUNLOAD, REPLACE, STATS = 10

GO

RESTORE LOG [people] FROM DISK = N'F:\people.bak'

WITH FILE = 2, NORECOVERY, NOUNLOAD, STATS = 10

GO

实施,以下步骤按编号顺序执行:

1. 主机上执行:

USE master

GO

--创建证书,并备份

CREATE MASTER KEY ENCRYPTION BY PASSWORD=N'joe123';

CREATE CERTIFICATE Cert_JOEPC

WITH SUBJECT=N'JOEPC Certificate',START_DATE='20120405',EXPIRY_DATE='20990405';

BACKUP CERTIFICATE Cert_JOEPC TO FILE=N'C:\Cert_JOEPC.cer';

GO

--创建镜像端口

CREATE ENDPOINT EP_JOEPC_Mirr

STATE=STARTED

AS TCP

(

LISTENER_PORT=5022,

LISTENER_IP=ALL

)

FOR DATABASE_MIRRORING

(

AUTHENTICATION=CERTIFICATE Cert_JOEPC,

ENCRYPTION=REQUIRED ALGORITHM AES,

ROLE=PARTNER

)

 

                 GO

2. 镜像机上执行:

USE master

GO

--创建证书,并备份

CREATE MASTER KEY ENCRYPTION BY PASSWORD=N'joe123';

CREATE CERTIFICATE Cert_110

WITH SUBJECT=N'Certificate 110',START_DATE='20120405',EXPIRY_DATE='20990405';

BACKUP CERTIFICATE Cert_110 TO FILE=N'C:\Cert_110.cer';

GO

--创建镜像端口

CREATE ENDPOINT EP_110_Mirr

STATE=STARTED

AS TCP

(

LISTENER_PORT=5022,

LISTENER_IP=ALL

)

FOR DATABASE_MIRRORING

(

AUTHENTICATION=CERTIFICATE Cert_110,

ENCRYPTION=REQUIRED ALGORITHM AES,

ROLE=PARTNER

)

GO

 

3. 见证机上执行:

USE master

go

--创建证书,并备份

CREATE MASTER KEY ENCRYPTION BY PASSWORD =N'joe123';

CREATE CERTIFICATE Cert_111

WITH SUBJECT=N'Certificate 111';

BACKUP CERTIFICATE Cert_111 TO FILE=N'C:\Cert_111.cer';

GO

--创建镜像端口

CREATE ENDPOINT EP_111_Mirr

AS TCP

(

LISTENER_PORT=5022,

LISTENER_IP=ALL

)

FOR DATABASE_MIRRORING

(

AUTHENTICATION=CERTIFICATE Cert_111,

ENCRYPTION=REQUIRED ALGORITHM AES,

ROLE=WITNESS

)

 

            GO

4. 把上面三个步骤中备份的证书COPY到每台机,确保每台机都有此三个证书。

5. 主机上执行:

             USE master

       GO

--为镜像机访问主机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_110 WITH PASSWORD=N'joe123';

CREATE USER User_For_110 FOR LOGIN Login_For_110;

CREATE CERTIFICATE Cert_For_110 AUTHORIZATION User_For_110 FROM FILE=N'C:\Cert_110.cer';

GRANT CONNECT ON ENDPOINT::EP_JOEPC_Mirr TO Login_For_110;

GO

--为见证机访问主机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_111 WITH PASSWORD=N'joe123';

CREATE USER User_For_111 FOR LOGIN Login_For_111;

CREATE CERTIFICATE Cert_For_111 AUTHORIZATION User_For_111 FROM FILE=N'C:\Cert_111.cer';

GRANT CONNECT ON ENDPOINT::EP_JOEPC_Mirr TO Login_For_111;

       GO

6. 镜像机上执行:

USE master

GO

--为主机访问镜像机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_JOEPC WITH PASSWORD=N'joe123';

CREATE USER User_For_JOEPC FOR LOGIN Login_For_JOEPC;

CREATE CERTIFICATE Cert_For_JOEPC AUTHORIZATION User_For_JOEPC

FROM FILE =N'c:\Cert_JOEPC.cer';

GRANT CONNECT ON ENDPOINT::EP_110_Mirr TO Login_For_JOEPC;

GO

--为见证机访问镜像机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_111 WITH PASSWORD=N'joe123';

CREATE USER User_For_111 FOR LOGIN Login_For_111;

CREATE CERTIFICATE Cert_For_111 AUTHORIZATION User_For_111

FROM FILE =N'c:\Cert_111.cer';

GRANT CONNECT ON ENDPOINT::EP_110_Mirr TO Login_For_111;

GO

 

7. 见证机上执行:

USE master

GO

--为主机访问见证机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_JOEPC WITH PASSWORD=N'joe123';

CREATE USER User_For_JOEPC FOR LOGIN Login_For_JOEPC;

CREATE CERTIFICATE Cert_For_JOEPC AUTHORIZATION User_For_JOEPC FROM FILE=N'c:\Cert_JOEPC.cer';

GRANT CONNECT ON ENDPOINT::EP_111_Mirr TO Login_For_JOEPC;

GO

--为镜像机访问见证机的镜像端口而创建登录和用户,并授予连接权限

CREATE LOGIN Login_For_110 WITH PASSWORD=N'joe123';

CREATE USER User_For_110 FOR LOGIN Login_For_110;

CREATE CERTIFICATE Cert_For_110 AUTHORIZATION User_For_JOEPC FROM FILE=N'c:\Cert_110.cer';

GRANT CONNECT ON ENDPOINT::EP_111_Mirr TO Login_For_110;

GO

8. 镜像机上执行:

      ALTER DATABASE people SET PARTNER =N'TCP://192.168.1.3:5022';

9. 主机上执行:

ALTER DATABASE [people] SET PARTNER=N'TCP://192.168.1.110:5022';

ALTER DATABASE [people] SET WITNESS=N'TCP://192.168.1.111:5022';

10. 完成以上步骤,正常情况,people数据库镜像就建立起来了。将会看到:

主机:

镜像机:

然后在主机上简单地查询一下见证机的状态:我这里的见证机因为后来重新用GUI配置过,所以显示为计算机名。

SELECT 'people' AS [DB_Name],mirroring_role_desc,

mirroring_partner_name,mirroring_witness_name,mirroring_witness_state_desc

FROM sys.database_mirroring

WHERE database_id=DB_ID(N'people')

总结:

  1. 工作组模式下,曾经遇到过两次主机和镜像配置成功,见证机总是连接不上的问题。我尝试过以下方法解决:

    1. 检查网络联通性,确保见证机的IP和端口可用。

    2. 给每台机加上FQDN,即设置同样的DNS后缀名。(方法:计算机右键,属性更改设置更改其他DNS后缀)

    3. 修改每台机的HOST文件,将计算机名和IP绑定。

    4. 用SSMS GUI重新配置一次见证机。

  2. 还遇到过一些其它问题,错误提示很明显,根据其基本能解决。最常见无法建立镜像的错误,是因为镜像未能与主机一致,备份主机日志到镜像恢复一次或者重做镜像。

 

-------------------------------------

作者:Joe.TJ


你可能感兴趣的:(sql,server,mirror)