?
Solved

DNS issues Cannot resolve to domain controller from site B to site A

Posted on 2011-09-26
3
Medium Priority
?
352 Views
Last Modified: 2012-06-27
Hello

I have two site locations A and B.  I have an AD domain in site A.  I am trying to extend the domain from site A to site B.  The two sites are connected via VPN site to site connection using NAT over VPN as both sites unfortunately are using the same subnet.  (10.0.0.x).  So Site A is 10.0.0.x with NAT as 172.17.0.x.  Site B is also 10.0.0.x with NAT as 172.16.0.x.  I set the DNS on site B to point to site A using the NAT address.  The site A Domain is address 10.0.0.6 which id NAT as 172.17.0.6.  I added the 172.17.0.6 as a primary DNS entry on site B systems and I am able to resolve site A DNS hostnames by running nslookup on a site B machine.  Problem is that I cannot join a machine from site B to the site A domain.  I have added Host A records to the site A DNS that point the domain with the NAT IP.  It does not seem to help.  Any help would be greatly appreciated!
0
Comment
Question by:biz1it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 9

Accepted Solution

by:
Bill_Fleury earned 2000 total points
ID: 36600885
Microsoft does not support using Active Directory over NAT.  Please see:

http://support.microsoft.com/kb/978772

Even unsupported, I don't think you can solve this problem with NAT'ing,  Issues come into play with clients needing to do lookups of the several automatically provisioned records in an active directory DNS structure, which will not be available in a situation like you've presented here.  There are several problems that you'll run into along the way.

My suggestion would be to change the addressing at one site.  I know this is a daunting/almost impossible task in some environments, but it's a necessity if you're trying to use active directory between the two networks.
0
 

Author Closing Comment

by:biz1it
ID: 36931861
Yes unfortunately I had to bite the bullet and change the IP's on one site.  It's been a fun week....It is now working OK except for ironing out some issues with SQL jobs failing.

Thanks for your response!
0
 
LVL 9

Expert Comment

by:Bill_Fleury
ID: 36932136
Sounds like a fun week.  Keep plugging away, I'm sure there will be a few things to iron out after having to change the addresses, but it will be well worth it in the end.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question