Domain & VPN problems
Posted on 2006-10-24
I am having a problem with my domain network and accessing it across a VPN. My VPN is done using 2 Nortel routers and it is a branch office VPN. Here is my config:
[client PCs]----------[windows 2000 AS - 192.168.1.5]----------[VPN router - 192.168.1.1]=====TUNNEL=====[VPN router - 192.168.3.1]----------[remote PCs]
The router is running DHCP (not the 2000 server). The 2000 server is running WINS and all client PCs are using DHCP with a WINS server added manually (192.168.1.5). All client PCs therefore use 192.168.1.1 as their DNS server (not the windows 2000 server). The remote PCs have been members of the domain before they were moved to the remote location. They list the domain in the list before logon still. They can ping 192.168.1.5 but the name 'server' will not resolve to 192.168.1.5 as it does on the local client PCs. The remote PCs also have the same WINS entry (192.168.1.5). If I try and access a resource on the Windows 2000 server from a remote PC I am incorrectly prompted for a username / password. If I change the DNS server on the remote PC from 192.168.3.1 to 192.168.1.5 this allows the remote PCs to log onto the domain. However, I do not want to network them this way as it will complicate my setup and increase traffic in the VPN tunnel. I was hoping that by using WINS I could log onto the domain from the VPN as I can with the local client PCs. My VPN doesn't block ANY traffic/ports, and every 192.168.1.x resource can access any 192.168.3.x resource (and vise versa).