{"id":220,"date":"2018-08-30T04:30:14","date_gmt":"2018-08-30T04:30:14","guid":{"rendered":"http:\/\/michaelschultz.net\/tech\/?p=220"},"modified":"2018-11-26T19:44:02","modified_gmt":"2018-11-26T19:44:02","slug":"using-powershell-to-fake-converting-configmgr-ipsubnet-to-iprange-boundaries","status":"publish","type":"post","link":"https:\/\/michaelschultz.net\/tech\/using-powershell-to-fake-converting-configmgr-ipsubnet-to-iprange-boundaries\/","title":{"rendered":"Using PowerShell to fake converting ConfigMgr IPSubnet to IPRange boundaries"},"content":{"rendered":"

Over the years that I have done work ConfigMgr, there was a back and forth on what type of boundaries to use between IPRange and IPSubnet. I have worked in places that were one or the other as well as mixed. Normally, what was used was determined by the suggestion of a Microsoft PFE. Now, I want to convert my IPSubnet boundaries to IPRange boundaries.<\/p>\n

Personally, I do not like IPSubnet boundaries in ConfigMgr because the subnet mask information is not stored in the database. This means I can tell what the first IP address covered in the boundary is but I do not know what the last IP will be.<\/p>\n

In most cased for my environment, the IPSubnet will just cover a single full class C range. For the range of 10.10.10.0-10.10.10.255, it would have Network of 10.10.10.0, Subnet mask of 255.255.255.0, and have a subnet ID of 10.10.10.0 in ConfigMgr.<\/p>\n

Now I have seen a few cases in other environments where the range is 10.10.10.0-10.10.11.255. This would have Network of 10.10.10.0, Subnet mask of 255.255.254.0, and end up with a subnet ID of 10.10.10.0 in ConfigMgr. This is the same SubnetID even though the subnet mask is different.<\/p>\n

\"\"<\/p>\n

In my environment, we have recently set the standard to use IP ranges only, but what to do with the existing SubnetIP based boundaries? We need to switch them over to ranges, but that is not a fun thing to do manually. Luckily, there is PowerShell to the rescue.<\/p>\n

Unfortunately, I quickly learned that SET-CMBOUNDARY is great for changing the name of the boundary but you cannot change the type and give it a new value. I have to create new boundaries.<\/p>\n

Here is what I needed to do:
\n1) Figure out the IP range from the Subnet ID (Only worrying about X.X.X.0 SubnetIDs and assuming the subnet masks are all 255.255.255.0)
\n2) Create the new range based boundary with the same name as the old subnetID boundary
\n3) Add the new boundaries to same boundary groups as the old ones
\n4) Remove the old subnetID boundary, if desired
\n5) Repeat over 1000 times<\/p>\n

My solution is ugly and probably not the greatest because it loops through a CSV file and each boundary has multiple lines because each boundary is a member of multiple boundary groups and I need better SQL skills. This leads to many errors as it tries to create the boundary after creating it and tries to delete the old boundary after deleting it.<\/p>\n

The first step was to get all the info I needed and SQL had it all.<\/p>\n

Using the following query, I got the name of the boundaries, their ID, took the subnet value and converted it to a range, and got the boundary groups IDs of the groups the boundaries are part of.<\/p>\n

\"\"<\/p>\n

SELECT<\/span>
\nvSMS_Boundary.<\/span>DisplayName,<\/span> vSMS_Boundary.<\/span>BoundaryID AS<\/span> id,<\/span>
\nSTUFF(<\/span>vSMS_Boundary.<\/span>value,<\/span> LEN(<\/span>vSMS_Boundary.<\/span>value)<\/span>,<\/span> 1<\/span>,<\/span> '1'<\/span>)<\/span> +<\/span> '-'<\/span> +<\/span> STUFF(<\/span>vSMS_Boundary.<\/span>value,<\/span> LEN(<\/span>vSMS_Boundary.<\/span>value)<\/span>,<\/span> 1<\/span>,<\/span> '254'<\/span>)<\/span> AS<\/span> range,<\/span>
\nvSMS_BoundaryGroup.<\/span>GroupID AS<\/span> bgid
\nFROM<\/span> vSMS_Boundary INNER<\/span> JOIN<\/span>
\nvSMS_BoundaryGroupMembers ON<\/span> vSMS_Boundary.<\/span>BoundaryID =<\/span> vSMS_BoundaryGroupMembers.<\/span>BoundaryID INNER<\/span> JOIN<\/span>
\nvSMS_BoundaryGroup ON<\/span> vSMS_BoundaryGroupMembers.<\/span>GroupID =<\/span> vSMS_BoundaryGroup.<\/span>GroupID
\nWHERE<\/span> vSMS_Boundary.<\/span>BoundaryType =<\/span> '0'<\/span> AND<\/span> vSMS_Boundary.<\/span>Value LIKE<\/span> '%.0'<\/span><\/div><\/div>\n

I took the output the copied it with headers into Excel to create a CSV file. This will be the input for the script. As mentioned before, these ranges are created with the assumption that are full class C ranges with 255.255.255.0 or \/24 subnet. If you have subnets that are \/22 or \/13, for example, the SQL is still a great start and you can just edit the third octet of second half of the range within the CSV file to create a properly sized IPRange boundary.<\/p>\n

The input CSV file can be manually created as well. The column headers are displayname, id, range, and bgid.<\/p>\n

Displayname \u2013 The name of the boundary
\nId \u2013 BoundaryID of the out IPSubnet boundaryRange \u2013 IP range for the boundary
\nBgid \u2013 Boundary Group ID to add boundary. Each boundary group add does<\/p>\n

require a separate line in the CSV<\/p>\n

I then passed the information in the CVS through my PowerShell script. The script created the IPRange boundaries, associated boundary groups to the boundary, and then deleted the old IPSubnet boundary.<\/p>\n

The syntax is:<\/p>\n

Switch-IPSubnet-to-IPRange-Boundaries.ps1 -inputfile file.csv -sc sitecode: <-del y><\/p>\n

The \u2013del y switch is not mandatory and toggles the automatic deletion of the IPSubnet boundaries. Without the switch, they have to be deleted afterwards.<\/p>\n

The script and SQL can be found GitHub at https:\/\/github.com\/NecroMonkey\/vault\/tree\/master\/ConfigMgr-Scripts<\/p>\n

&<\/span>lt;#<\/span>
\n
\n.SYNOPSIS
\nThe script takes an input CSV file of IPSUbnet boundaries and loops through it to create new IPRange boundaries
\n
\n.SYNTAX
\nSwitch-<\/span>IPSubnet-<\/span>to-<\/span>IPRange-<\/span>Boundaries.ps1 -<\/span>inputfile file.csv -<\/span>sc<\/span> sitecode: &<\/span>lt;-<\/span>del<\/span> y&<\/span>gt;
\n
\n.DESCRIPTION
\nThe script takes an input CSV file and loops through it to create new IP range based ConfigMgr boundaries off IP subnt boundaries in<\/span> the file,<\/span> add it to desired boundary groups,<\/span> and delete the old IPSubnet boundary.
\n
\n.PARAMETER DisplayName
\nName to be given to the new boundary created
\n
\n.PARAMETER id
\nBoundary ID of the IPSubnet boundary being replaced by the new IPRange boundary
\n
\n.PARAMETER range
\nIP Range to be used in<\/span> creating the IPRange boundary. x.x.x.x-<\/span>x.x.x.x format
\n
\n.PARAMETER bgid
\nBoundary Group<\/span> ID that the new boundary will be added
\n
\n.PARAMETER del<\/span>
\nOptional parameter to automatically remove the old IPSubnet boundary. Suggest not using and verify new boundarie and manually delete old. Only accepted pararmeter is y
\n
\n.PARAMETER sc<\/span>
\nConfigMgr site code. FOrmat is site code followed by :
\n
\n.PARAMETER InputFile
\nPath and name of input CSV file
\n
\n.INPUTS
\nCSV file with the following column header names: displayname,<\/span> id,<\/span> range,<\/span> and bgid. This is the input for<\/span> the matching parameters. Each boundary group<\/span> add does require a separate line
\n
\n.NOTES
\nFileName: Switch-<\/span>IPSubnet-<\/span>to-<\/span>IPRange-<\/span>Boundaries.ps1
\nAuthor: Michael Schultz
\nContact: mschultz@<\/span>necro-<\/span>monkey.com
\nCreated: 20180825<\/span>
\nModified:
\nVersion: 1.0.0
\n
\n.EXAMPLE
\n.\\recreateranges.ps1 -<\/span>InputFile .\\InputFile.csv -<\/span>del<\/span> y -<\/span>sc<\/span> sms:
\n
\n#&gt;<\/span>
\n
\n#-----Parameters-----<\/span>
\n
\nparam<\/span>(<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>1<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$DisplayName<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>1<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$range<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>1<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$bgid<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>1<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$id<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$false<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$del<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$sc<\/span>,<\/span>
\n[<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n[<\/span>string<\/span>]<\/span>$InputFile<\/span>
\n)<\/span>
\n
\n#-----Initializations and Module Imports-----<\/span>
\n
\n#Get ConfigMgr Console Install Path to locate PS Module.<\/span>
\n
\nIf<\/span> (<\/span>Test-Path<\/span> "C:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\nImport-<\/span>Module "C:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseIf<\/span> (<\/span>Test-Path<\/span> "C:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\nImport-<\/span>Module "C:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseif<\/span> (<\/span>test-path<\/span> "d:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\nImport-<\/span>Module "d:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseIf<\/span> (<\/span>Test-Path<\/span> "d:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\nImport-<\/span>Module "d:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nElse<\/span> {<\/span>
\nWrite-output<\/span> "Can't Find your ConfigMgr Module"<\/span>
\nexit
\n}<\/span>
\n
\n#-----Variables-----<\/span>
\n
\n$List<\/span> =<\/span> Import-Csv<\/span> -Path<\/span> $InputFile<\/span>
\n
\n#-----Execution-----<\/span>
\n
\n#Change to ConfigMgr PSDrive<\/span>
\nSet-Location<\/span> $sc<\/span>
\n
\n#Create IPRange boundaries<\/span>
\nForeach<\/span> (<\/span>$item<\/span> in<\/span> $List<\/span>)<\/span>
\n{<\/span>
\nNew-<\/span>CMBoundary -DisplayName<\/span> $item<\/span>.DisplayName -<\/span>BoundaryType IPRange -Value<\/span> $item<\/span>.range
\n}<\/span>
\n
\n#Add new boundary to boundary groups<\/span>
\nForeach<\/span> (<\/span>$item<\/span> in<\/span> $List<\/span>)<\/span>
\n{<\/span>
\nAdd-<\/span>CMBoundaryToGroup -<\/span>BoundaryGroupID $item<\/span>.bgid -<\/span>BoundaryName $item<\/span>.Displayname
\n}<\/span>
\n
\n#Delete old IPSubnet boundary if desired<\/span>
\nif<\/span> (<\/span>$del<\/span> -eq<\/span> 'y'<\/span>)<\/span>
\n{<\/span>
\nForeach<\/span> (<\/span>$item<\/span> in<\/span> $List<\/span>)<\/span>
\n{<\/span>
\nRemove-<\/span>CMBoundary -Id<\/span> $item<\/span>.id -Force<\/span>
\n}<\/span>
\n}<\/span><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

Over the years that I have done work ConfigMgr, there was a back and forth on what type of boundaries to use between IPRange and IPSubnet. I have worked in places that were one or the other as well as mixed. Normally, what was used was determined by the suggestion of a Microsoft PFE. Now, … Continue reading “Using PowerShell to fake converting ConfigMgr IPSubnet to IPRange boundaries”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4,14,13,17],"tags":[],"class_list":["post-220","post","type-post","status-publish","format-standard","hentry","category-configmgr","category-powershell","category-scripting","category-sql"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p98a2r-3y","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/comments?post=220"}],"version-history":[{"count":5,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/220\/revisions"}],"predecessor-version":[{"id":256,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/220\/revisions\/256"}],"wp:attachment":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/media?parent=220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/categories?post=220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/tags?post=220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}