Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 292
  • Last Modified:

NT domain trust across a cisco router

I think this is probably a pretty straightforward problem, but I've failed to get it:
I have domains sam and smc separated by a cisco 2621.  smc has some resources that sam must use.  I've added helper-addresses for the broadcast channel and the pdc of the other side to each of my ports.  I've enabled directed-broadcast and added forward-protocol for the udp 137/138 that pass NetBIOS.  However, I still get the "unable to locate domain controller" when I set up the trust relationship.  Any ideas?
0
nherron
Asked:
nherron
  • 4
  • 2
  • 2
1 Solution
 
posivibeCommented:
Open up port 139 as well.
0
 
posivibeCommented:
Here's the Qbase article for the whole story:

http://support.microsoft.com/support/kb/articles/Q179/4/42.ASP

Port 135 for RPC calls should be opened as well.  We just set up a similar network last week but didn't need 135 for our purpose.
0
 
Tim HolmanCommented:
Opening these ports will stuff up your browsing :

http://support.microsoft.com/support/kb/articles/Q135/4/64.asp?LNG=ENG&SA=ALLKB&FR=0

+if you use Cisco's IP helper, look at :

http://support.microsoft.com/support/kb/articles/Q190/9/30.ASP

You need the 139 nbsession port to establish a session to create the trust account.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
scottrileyCommented:
Have you tried adding the details of the domain controller into the LMHOSTS files, this helps your local machines easily resolve the NETBIOS name.
Provided your machines have routes in place for the IP network of the domain controller then it can route for the IP in the usual way.

Not the most "spangly" way of doing things but should work for you.
0
 
posivibeCommented:
nherron???? have you tried any of our suggestion?  is it fixed?
0
 
Tim HolmanCommented:
*gobsmacked*
0
 
scottrileyCommented:
Why Gobsmacked Tim?
0
 
posivibeCommented:
I find that an interesting accepted answer because without port 139 you would be unable to create a trust.
0

Featured Post

Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

  • 4
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now