Domain over site to site VPN w/ASA5505s

I'm going to be setting up a site-to-site VPN using Cisco ASA 5505's on each end both having static IPs. I will be installing Windows 2003 Server on each end as well and I'm wondering how I should setup my domain? Do I need to centralize DNS and DHCP at the main site (Site A) and have Site B join the domain thru the VPN? If so how can I accomplish this being both subnets on each end are dissimiliar?  I also need to have a mapped drive to site A that can be accessed from site B along with printer mappings on both ends.  Thanks in advanced!
seanramosAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KevinCovertCommented:
It depends on the traffic you are expecting from siteB.  If it will be a small remote office with minimal traffic, you should be fine with the file share in the remote location.  I would however, put a DC/DNS server at site B this would allow those workstations to function in the case that link was down.

DHCP be default you want to have two DHCP servers with a shared range of addresses for fault tolerance, just put the second half of the range on the siteB DC as well.  I would just setup one domain with two controllers, nothing fancy.  If you see replication issues I would address that then, I don't expect any issues if my assumption is correct that you are managing a relatively small site.

Are you going to have DSL or a T1 at the new location?  If its going to be a T1, the users will see a significant performance hit if they are transferring any large files.

That's how I would do it.

Hope that helps.

KMC
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
seanramosAuthor Commented:
Thanks for the fast response.  Now that sounds about right but through the VPN site A will be 192.168.1.x and site B will be 192.168.2.x, if I have DHCP on both ends how would DHCP be implemented?  
0
KevinCovertCommented:
If each site will have its own subnet, I would simply put the corresponding DHCP server pools on the DC at that site.

Site A                                                   Site B
ServerDC-a                                          ServerDC-b
192.168.1.5                                         192.168.2.5
DC/DNS                                                DC/DNS
DHCP pool                                           DHCP pool
192.168.1.50-150                               192.168.2.50-150

Don't forget to setup DNS replication, and make sure that the reverse lookup zones are present(the should be by default).

Hope that helps.

KMC
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

seanramosAuthor Commented:
Thanks again, yes the site to site will be a bonded T1 3Mbs up/down.  So having this setup and both DC's at remote locations along with DNS and DHCP shoudn't be a problem? Replicating and authenticating would take a hit right?
0
KevinCovertCommented:
Authentication shouldn't be an issue with DC's in each site, replication will go across the link but it shouldn't be an issue.

It all depends on how large your AD db is and how many users are at siteB.

Glad I could help.

KMC
0
KevinCovertCommented:
Also, if you find that file access is an issue with limited bandwidth, look into DFS it will replicate your file shares across the WAN.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.