嵌套Invoke-Command管理故障转移集群虚拟机遇IP参数为空错误求助

在对Windows故障转移集群节点上的虚拟机执行IP配置命令时，使用嵌套Invoke-Command先连接集群节点，再在指定VM上执行New-NetIPAddress，脚本未嵌套时可正常运行，但嵌套后出现参数为空的错误。

原脚本如下：

$computers = Import-Csv -Path 'C:\Temp\PS Scripts\References\IPList.csv' -Delimiter ","
$localCred = Get-Credential -Message "Local credentials required" -UserName Administrator
$domainCred = Get-Credential -Message "Local credentials required" -UserName Domain\Administrator
foreach ($computer in $computers) {
    Invoke-Command -Computer $computer.Host -Credential $domainCred -ScriptBlock {
        Invoke-Command -VMName $Using:computer.VMName -Credential $Using:localCred -ScriptBlock {
            New-NetIPAddress -IPAddress $Using:computer.IPAddress -PrefixLength $Using:computer.PrefixLength -AddressFamily $Using:computer.AddressFamily -InterfaceAlias $Using.computer.InterfaceAlias -DefaultGateway $Using:computer.DefaultGateway
}}}

报错信息：

Cannot bind argument to parameter 'IPAddress' because it is an empty string.

• CategoryInfo : InvalidData: (:) [New-NetIPAddress], ParameterBindingValidationException
• FullyQualifiedErrorId : ParameterArgumentValidationErrorEmptyStringNotAllowed,New-NetIPAddress

1. 嵌套Invoke-Command的正确性 #

嵌套Invoke-Command本身是PowerShell支持的用法，但你的实现存在变量作用域传递错误，这是核心问题所在。

$Using关键字仅能将本地会话的变量传递到直接调用的远程会话中，多层嵌套时，第二层ScriptBlock里的$Using:computer会尝试从第一层远程会话（集群节点）中获取变量，而非本地会话的$computer对象——但第一层远程会话中并没有$computer变量，因此所有属性值都为空字符串，触发参数绑定错误。

另外脚本存在语法错误：$Using.computer.InterfaceAlias应改为$Using:computer.InterfaceAlias（冒号而非点号），这也是导致部分参数为空的原因。

2. 修复嵌套脚本的变量传递 #

解决思路是：将本地$computer对象的属性拆解为单独变量，先传递到第一层远程会话，再从第一层传递到第二层VM的会话中。修改后的脚本如下：

$computers = Import-Csv -Path 'C:\Temp\PS Scripts\References\IPList.csv' -Delimiter ","
$localCred = Get-Credential -Message "Local credentials required" -UserName Administrator
$domainCred = Get-Credential -Message "Domain credentials required" -UserName Domain\Administrator

foreach ($computer in $computers) {
    # 提前拆解需要的属性为独立变量，避免多层$Using的作用域冲突
    $vmName = $computer.VMName
    $ipAddress = $computer.IPAddress
    $prefixLength = $computer.PrefixLength
    $addressFamily = $computer.AddressFamily
    $interfaceAlias = $computer.InterfaceAlias
    $defaultGateway = $computer.DefaultGateway

    Invoke-Command -Computer $computer.Host -Credential $domainCred -ScriptBlock {
        # 在集群节点会话中接收本地传递的变量
        $targetVM = $Using:vmName
        $targetIP = $Using:ipAddress
        $targetPrefix = $Using:prefixLength
        $targetFamily = $Using:addressFamily
        $targetIfAlias = $Using:interfaceAlias
        $targetGw = $Using:defaultGateway

        # 调用VM内的命令时，传递集群节点会话中的变量
        Invoke-Command -VMName $targetVM -Credential $Using:localCred -ScriptBlock {
            New-NetIPAddress -IPAddress $Using:targetIP -PrefixLength $Using:targetPrefix `
                -AddressFamily $Using:targetFamily -InterfaceAlias $Using:targetIfAlias `
                -DefaultGateway $Using:targetGw
        }
    }
}

3. 更优实现方案 #

如果你的环境允许VM直接被远程访问（无需通过集群节点中转），可以跳过嵌套，直接对VM执行Invoke-Command，简化逻辑：

$computers = Import-Csv -Path 'C:\Temp\PS Scripts\References\IPList.csv' -Delimiter ","
$localCred = Get-Credential -Message "Local credentials required" -UserName Administrator

foreach ($computer in $computers) {
    Invoke-Command -Computer $computer.VMName -Credential $localCred -ScriptBlock {
        New-NetIPAddress -IPAddress $Using:computer.IPAddress -PrefixLength $Using:computer.PrefixLength `
            -AddressFamily $Using:computer.AddressFamily -InterfaceAlias $Using:computer.InterfaceAlias `
            -DefaultGateway $Using:computer.DefaultGateway
    }
}

若必须通过集群节点中转（比如VM没有直接网络访问），可以使用Get-VM结合Invoke-Command的方式，逻辑更清晰：

$computers = Import-Csv -Path 'C:\Temp\PS Scripts\References\IPList.csv' -Delimiter ","
$localCred = Get-Credential -Message "Local credentials required" -UserName Administrator
$domainCred = Get-Credential -Message "Domain credentials required" -UserName Domain\Administrator

foreach ($computer in $computers) {
    # 先获取集群节点上的VM对象
    $vm = Get-VM -ComputerName $computer.Host -Name $computer.VMName -Credential $domainCred
    # 直接对VM执行命令
    Invoke-Command -VM $vm -Credential $localCred -ScriptBlock {
        New-NetIPAddress -IPAddress $Using:computer.IPAddress -PrefixLength $Using:computer.PrefixLength `
            -AddressFamily $Using:computer.AddressFamily -InterfaceAlias $Using:computer.InterfaceAlias `
            -DefaultGateway $Using:computer.DefaultGateway
    }
}

内容的提问来源于stack exchange，提问作者Avtech