New Remote Site (Active Directory)

BoomAM

BoomAM

BoomAM

Soldato
Joined
5 Jul 2003
Posts
16,206
Location
Atlanta, USA
Afternoon all,
I'm trying to work out the best way of doing something:

Lets assume the following, two sites, connected via a Layer2 point-to-point link.
We would want the second site on a different subnet than the main site.

How would you go about creating the basics of the other site, firewall & DC's.

I've a few ideas in mind but i was wondering what directions you all would take...

Thanks.

--
Process i was considering:
- Create VM for DC for site2.
- Run ADPrep
- Add new DC to domain
- Run DCpromo
- Create new site/subnet in S&S MMC
- Place new DC on its new subnet & site
- Set TMG to allow routing to new subnet
- Test
- Send packaged VM to new site.

Rough outline admittedly...
 
Last edited:
OK this is odd.

Created the new DC on a new subnet.
- AD appears to replicate.
- I can ping to anything on the main subnet.
- I can ping from the main subnet to the new subnet.

BUT
- DNS doesnt appear to want to pass recursive queries to other DNS servers.
- Cant access file shares from new DC to file server on old subnet.
- Sites & Services, the connections have only automatically generated between the new DC and one of the old DCs.
- Cant get on the net even though the firewall is setup....

Odd...
 
Last edited:
Appears to be fine when on its own subnet with its own firewall.

Problem now is that the VPN connection between two TMG firewalls doesn't appear to want to work.
Set as PPTP for now (for testing), it lets pings from the remote network's TMG to the main network, but not the other way around, or other clients on the remote network.
With logs on the main networks firewall saying its denied because "the destinuation is unreachable" ? or if trying RDP, "the policy rules do not allow the user request".

What's strange is that in Routing & Remote Access, the remote server connecting via PPTP only appears as a normal PPTP client on the main sites firewall!?

Any ideas?
 
Last edited:
Is it a National Ethernet link between the two? Do you need a VPN here?

For internet access as it stands - do the clients on the new subnet have a correct default route? How have you got the network set up to cater for separate subnets currently? Are ICMP and RDP allowed through the remote network firewall? (Sorry i have no experience of TMG).

With Regards to the connections in S&S, that's normal because the new DC will only connect/replicate to whichever DC on another subnet is designated as the bridgehead - if you right click on the existing DC that has the connection and go to properties, chances are you will see "IP" in the list regarding bridgeheads. This is for efficiency with inter-site replication.

Sorry if I am missing the boat...it's bed time :p
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom