Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 410
  • Last Modified:

active directory with 2 different subnet

hi all
I have DC running windows server 2008 with DNS and DHCP and my ip range ( 192.168.1.0) mask ( 255.255.240.0 ) it contain both servers and clients IP
son i plan to make 2 Vlan the firest one contain servers and DC ( it will be in the same old range 192.168.1.0 )  and i will add second ip for DC to contact the other clints VLAN
and i will create new subnet VLAN2 ( 10.0.0.0  mask 255.255.240.0 ) and move all clients to it
and make routing between the 2 VLANS
so is this plan will enable clients to contact normally with DC and other Servers like ISA
or not ? and how to prepare DC and DNS for that ?
and if this will make problems what is the good idea to make my plan work ?
0
asfourcrystal
Asked:
asfourcrystal
  • 7
  • 5
1 Solution
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
Hi,
Create a subnet in AD sites & Services and map the subnet to the present site where  the DC is located.

After created the Subnet wait till the subnet replicates to all the DC and then run Netdiag /fix so it will be fixed in DNS..!

Let me know if you have any questions on the same..!
0
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
0
 
asfourcrystalAuthor Commented:
Create a subnet in AD sites & Services
is this enough for DC to comunicate with new subnet users or i must add seconed ip adress in DC LAN card
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
asfourcrystalAuthor Commented:
and for you information sir my DC running server 2008  is that make any different in steps and use netdiag /fix
0
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
HI,
Creating subnet is enough make sure that vlan is configured to access resources from VLAN2 to VLAN1.

Please confirm is DC is in VLAN1 or VLAN2?

Make sure that DC can be pinged from both network...!
0
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
What netdiag /fix does in this is it will append the updated subnet in DNS so it is used to locate the DC from both network
0
 
asfourcrystalAuthor Commented:
DC is in the subnet that already exist and it will be VLAN 1
and i will creat VLAN 2 and move all clients to it
0
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
Can VLAN2 pings VLAN1?
0
 
asfourcrystalAuthor Commented:
how can i sure that netdiag /fix successfully append the updated subnet in DNS ?
what changes that i can see in DNS?
0
 
asfourcrystalAuthor Commented:
to which site should I associate the new subnet ? the defualt one or create site for the new subnet ?
 
0
 
asfourcrystalAuthor Commented:
yes sir
VLAN2 pings VLAN1
0
 
asfourcrystalAuthor Commented:
anyone help?
0
 
Henrik JohanssonSystems engineerCommented:
The only necessary change for preparing AD with the new subnet is as already posted creating the new subnet and assign it to the site by using AD Sites and Services.
A DC can only be located in one site at the same time, so creating a new site will not help when having a single DC environment.
The additional IP isn't necessary on the DC. Just make sure that the both VLANs can reach eachover shall be enough to make the clients reach the server.

netdiag/fix (or restarting netlogon service) registers SRV-records in DNS for resolving where the logon server is located. Use DNS MMC and browse down to the _msdcs.domainname.local or _tcp.domainname.local to verify that the DNS-records has been created.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 7
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now