Having an issue here. I am setting up a second domain controller in Canada to our Win2003 domain in the US.
I have setup a Pix site to site VPN tunnel and it seems to be working fine. I can ping both networks from either side by IP.
The DC in the US is running AD and DNS. The DC in Canada cannot join the domain to configure AD and replication yet.
I have pointed the Canada DNS to itself as primary and to the DC in the US as secondary. I have setup forwarders to their ISPs DNS for internet and added a DNS suffix for the domain name. Nothing should be blocking traffice on the Pixes because it's my understanding that all ESP traffic from the tunnel is allowed both ways. What am I doing wrong?