Solved

ad replication and nat

Posted on 2004-08-31
10
173 Views
Last Modified: 2010-04-14
Hi
can active directory replication work if there is NAT between two sites?
thanks
0
Comment
Question by:aresblade22
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
10 Comments
 
LVL 40

Accepted Solution

by:
Fatal_Exception earned 500 total points
ID: 11947931
Absolutely..  Most networks have NAT routers setup on their perimeter, along with the firewalls...  

FE
0
 

Author Comment

by:aresblade22
ID: 11951308
how should i configure it?
some special indications? some documents on this?
what about trust between two forest? does it work with nat?
how to configure?
thanks
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11951793
You got some reading ahead of you, that is for sure..  hope you are up for it..  :)

And once you configure your trust relationships, certainly, they will work through the routers also.

This article pretty much covers all your questions..

http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx

0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:aresblade22
ID: 11977739
Ok but this mean that the only way to replicate two domain controllers with nat in the middle is to use ipsec?
is the only way?
are there some improvements with 2003?
Thanks
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11989695
No, but if you do not use IPSEC, then you must open your firewalls to RPC traffic, and I would never suggest that.  

I believe that W2K and 2K3 use all the same technologies for replication...
0
 

Author Comment

by:aresblade22
ID: 12111583
they always talk of nat with ipsec but i need a document with only nat and ad,
i have:

ad server 1- 10.1.1.1-------------------------------10.1.1.2   nat  192.168.2.1-----------------------------ad server 2- 192.168.2.2

no vpn or ipsec only nat between two private networks, does this work? some documents on this?
thanks
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12325625
Refund the points..  never did get a chance to get back on this one...  sorry...
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
kerberos errors 7 555
Cursed with a Windows 2000 Server that needs to copy files 3 730
HeapQueryInformation could not be located 1 923
no logon server available 8 159
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question