Can't see user VLAN from Server VLAN

Posted on 2009-04-16
Last Modified: 2012-05-06
After setting up VLANs we can no longer see computers on the users VLAN from the server VLAN.  I was told to install WINS and that would fix the issue, and it has.  The problem being is now I am being told that they want to do away with WINS and only use DNS.  

Do I have to do anything specific with DNS to make it talk between VLANs?  It seems WINS fixed this problem, but if they are not going to allow me to run WINS anymore I am not sure how to fix this problem.

Also when I take out the WINS setting I can't go to My Network Places and see all our computers and servers.  I was told that this all can be done with DNS, but I am not sure how it is done.  Any help would be great!
Question by:eServ
    LVL 38

    Expert Comment

    The issue you are running into is Netbios is not a routeable program. Netbios carries the information for the master browser. The domain master browser is used to populate My network places. Netbios broadcasts from the clients and servers on one site will not see clients and servers on the other VLAN because Netbios will not go through a VPN tunnel, across NAT, to different subnets, or over VLAN.

    You can set up a WINS connection between the two sites MASTER BROWSERS. Or you can set up a LMHOST RECORD between the two master browsers.

    The default ports for file and print sharing and the master browser are similar. I think the browser service will populate using the SMB ports, and I know it will populate over the old school way to populate the master browser.

    ((((UNFORTUNATELY)))) the master browser service and its use of netbios broadcasts HASN'T changed a bit since the NT4 server era.

    Netbios /WINS    port 137   UDP and TCP
    Netbios datagram ports 138 UDP
    Netbios datagram port 139 UDP

    SMB (server Message Block) File and print sharing ports:
    SMB port 445 UDP and TCP
    Netbios datagram port 139 UDP

    I have helped MANY folks get over this issue. So, just google search ChiefIT + Master + Browser. Or EE search for this.
    LVL 38

    Expert Comment

    Any additional questions please ask.

    Author Comment

    Thanks for the help ChiefIT

    From what I have looked over to fix this problem I need to setup one Master Browser on each VLAN correct and one Domain Master Browser?  Then I need to use the LMHOST RECORD to link between the VLANs?

    If I complete this then I should be able to see all the computers on the network via My Network Places?
    LVL 38

    Accepted Solution

    Three VLANS:

    Main VLAN: One domain master browser and hopefully one backup browser.
    Second VLAN: One Master browser
    third VLAN: One Master browser.

    Enable LMHOST lookup on each nic of these machines.
    Now create an LMHOST file that includes all of these machines.

    LMHOST is the WINS version of the HOST file that belongs to DNS. So, you are cheating in a way. Instead of WINS you are using the LMHOST to connect your master browsers between sites. You will not have a WINS server, but the LMHOST acts as a WINS hookup between the machines.
    LVL 38

    Expert Comment

    You could also unblock port 137, 138 and 139 between VLANS. I think that will work for you as well.

    Author Closing Comment

    Thanks again ChiefIT!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now