SBS 2011 Standard server based VPN for inter site AD replication

Hello,

I have a client that currently has 2 sites and is using SBS 2011 on the main site and Windows 2008 std on the second.

I am looking to configure Windows based VPN link(s) between the sites to allow AD replication.

I have currently configured the second site to connect to the Windows SBS 2011 using the VPN wizard on the main office server, and used a VPN client connection on the second site server; but am having communication issues.

I have run repadmin and it shows that the main site is not able to communicate with the second office.

Do I have to create a separate VPN connection from the main site to the second site server to enable 2 way VPN traffic?

Due to project funding restrictions at this time, we are restricted to utilizing a Windows VPN solution; with future plans to migrate the VPN to a hardware based solution.

Many thanks for any assistance and advice
dwknightAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cris HannaSr IT Support EngineerCommented:
Is the server at the remote location already a DC?
0
dwknightAuthor Commented:
Hello,

Yes it is. It was initially set up using the following procedure.

1. Enable VPN access on the main site SBS 2011 server
2. Connect to the main site from the remote site by establishing a VPN connection.
3. Run DC Promo - took a while to update (overnight)
4. Any updates generally take a fair amount of time.

Runing repadmin shows that there has never been any connection. But there are updates occurring.
0
Cris HannaSr IT Support EngineerCommented:
what kind of bandwidth do you have between the two sites?
How close are the two facilities?   Close enough that you can take the remote server to the main office and redo the DCPROMO, verify replication, then take back to remote location and run DCDIAG
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

dwknightAuthor Commented:
Apologies about the late follow up.

Both have an ADSL link 5meg down/ 384 up.

After additional research, the AD is definitely replicating. The error report seems to be the RPC service not being found between the sites. I am thinking that rpc is not configured on the server to use the VPN connection. Pretty much everything else is working after using a few other switches when running repadmin.

At this point,  it is not possible to remove the site DC and bring it back to the main office.

Thanks for the follow up.
0
dwknightAuthor Commented:
I have found the source of the rpc replication issue!

Because the site DC is connecting back to the main office via a vpn, DNS has both the site ip address for the server (on the site subnet) and the main office DNS entry for the site DC (on the main office subnet).

After a bit of troubleshooting, it appears that RPC communication from the main office is defaulting to the site ip address for the site DC, not the main office vpn ip address assigned to the site server.

Is there any way to set a preferred ip address for rpc communication?

Thanks for any advice.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dwknightAuthor Commented:
Thanks, the question has been open for a while, but I have not had any further luck - so at this point - I am closing it as finished.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.