Solved

Set Up Win2k8 with 2 NICS for DNS/DHCP/AD

Posted on 2010-11-10
13
1,198 Views
Last Modified: 2012-06-21
Hello everyone, I'm trying to understand the basics of something that's always been a crapshoot, and that's setting up what I believe is referred to as a multi-homed box. At times this is a requirement so I want to learn how to do. As an example, theres some old devices that will only take 192.168.XXX.XXX IP's, but the main network is 168.18.223.XXX. So I need a good guide of what to do.

Setup:
Citrix Xenserver 5.6
Windows Server 2008 installed as a VM (not R2)
W2k8 is set with one virtual card bridged to eth0 (network 0), so that it receives an IP via DHCP from the work network. This IP is a 168.18.223.xx, netmask 255.255.255.0, and a gateway of 168.18.223.1
DNS and DCHP and Active Directory need to be installed. I went with AD first, and let it install DNS. DNS was pointed to eth2 (network2), which is a 3rd physical card in the machine that is connected to a switch. The goal is for this switch to be connected with W2k8. This network2 is assigned a static IP of 192.168.25.1, netmask 255.255.255.0, no gateway, and a primary dns of 127.0.0.1. DNS was set to only listen to this interface.
I then installed DHCP. DHCP was set to a scope of 192.168.25.100-200, netmask 255.255.255.0. DNS was assigned two forwarders, my works main DNS servers, the same ones the w2k8 server uses to browse the web, which are 168.18.216.211, and 168.18.216.222. With all that set up, when I plug in a computer, the system gives me an IP (192.168.0.100), and I can resolve locally, but I can't get on the internet. So I know something with DNS is screwy. The plugged in system shows the DNS server is 192.168.25.1, which seems correct to me, as everything should go local first, then be forwarded if necessary. DHCP (under its scope) shows 003 Router as the networks gateway (168.18.223.1), 006 DNS as 192.168.25.1, and 015 as DNS Domain Name, which is my AD domain.

So can anyone finally put together the pieces of the puzzle and tell me what I'm missing? Because it all seems correct.
0
Comment
Question by:Casey Weaver
  • 8
  • 5
13 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34105633
If your default is not on teh same subnet then this will not work.

Multihomed DCs are recommend or supported by MS for Domain Controllers or DNS.

Go to the TCP\IP properties to go the DNS tab uncheck the regsiter with DNS option on one of your NICs
0
 
LVL 7

Author Comment

by:Casey Weaver
ID: 34105915
I'll try changing to the same subnet and report back. Thank you.
0
 
LVL 7

Author Comment

by:Casey Weaver
ID: 34107210
Still haven't gotten anywhere. It ranges from the computers not seeing any dhcp server, to just the same fact they got an IP, but see no internet.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34108144
Post ipconfig /all please from a problem system.
0
 
LVL 7

Author Comment

by:Casey Weaver
ID: 34116739
Here's a screen capture after a fresh win2k8 setup with both nics using RRAS. There's plenty of examples of this on the internet and even this simply wouln't work, it makes no sense to me why it wouldn't. This is a client computer:

 Win 7 client
 The server is set up to receive DHCP on the WAN nic, and with 192.168.25.1 netmask 255.255.255.0 no gateway or dns on the LAN nic. fresh setup with just that configuration and RRAS installed. I was just trying to get that to work, though I doubt it will because I need the full DNS control so I can have BOOTTP option and PXE booting.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34117417
Here is the problem you should NOT have your DNS server running on a multihome computer.

Either way you don't need to setup your system to have an external NIC you can keep the one NIC enabled then within your router you can port forward to the internal IP address this at least gives you some security and allows everything to work properly
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 7

Author Comment

by:Casey Weaver
ID: 34117466
I need an external NIC because network 1 (external WAN) is a work network, delivering internet and access to the Xen Management Console. Network 2 (internal LAN) is a virtual nic to which all the VM's connect. It's to set up a virtualized setup for Active Directory, Windows Deployment Services, and Distributed File System.

Is there a recommendation to make this work?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34117487
No there is not a recommended way to get this to work.

What exactly do you want to get to work? Again your Hyper-v Host should NOT have any services except for Hyper-v.

You can then install VMs within the Hyper-v systems. The Hyper-v VMs will not connect to the other network unless it is routered to that side with an actual router.

Hyper-v should be running on at least 2 NICs one for management and another for virtual networks

You should not run any services on the Hyper-v host
0
 
LVL 7

Author Comment

by:Casey Weaver
ID: 34117564
This isn't on Hyper-V, this is on Xenserver. I have to get the VM's to communicate with the server while nothing else on the work network does (that's the only way Active Directory can set hostnames). Guess I'll have to keep working at a solution.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 34120209
If they are on different subnets you need a router or a switch that is configured for VLANs so the two subnets can communicate
0
 
LVL 7

Author Comment

by:Casey Weaver
ID: 34121295
I could just use one nic in the server. The problem would then be internet. The server gets IP's and DNS information from a cisco router, which the rest of the work place uses along with their own AD system. So I need internet to get to both the server and the vm's, while using the server for DNS/DHCP/AD just for the vm's. If I put the server on the main network, things would be in chaos because there's already a server on the work network doing that. So unless the vm's get internet through the server I honestly don't see any other way of this working. But there has to be a way to make it work. You can't tell me that MS didn't allow a way for the server to act as a gateway for the work environment.
0
 
LVL 7

Accepted Solution

by:
Casey Weaver earned 0 total points
ID: 34629608
I eneded up using a Linux system as a gateway to seperate my network and use just one nic. In my spare time I'll try to set up a working multi-home situation.
0
 
LVL 7

Author Closing Comment

by:Casey Weaver
ID: 34675517
Not the solution I wanted but it works for now, at the waste of another 64MB of ram and another system to maintain. Still don't know why an easier system to support this setup isn't in place for Win2k8.
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now