Solved

W2k3 servers on domain with firewall appliance

Posted on 2012-03-26
1
347 Views
Last Modified: 2012-06-27
With a firewall appliance, must Domain controllers and file servers have two IP addresses in order to be available from two offices?  A domain is shared between two locations.  Routers are mapped to resolve server ip addresses.  Once a firewall appliance is in place, and private ip addresses are issued for local machines, will servers require two IP addresses -- the public and private ip address so the other office will still have access?
We want to use 172.x.x.x for internal servers and workstations but resources on servers are shared between offices using 156.x.x.x
0
Comment
Question by:gtownladytn
1 Comment
 
LVL 6

Accepted Solution

by:
netjgrnaut earned 500 total points
ID: 37765853
In general, no - you should not need two IP addresses on the servers.  After you re-IP the two sites, you could (should?) establish a site-to-site VPN between either the two firewalls (if they support it) or two other servers (you can use the DCs if necessary).

More detail about your network design would be helpful...

I'm not sure I understand what you mean by...
Routers are mapped to resolve server ip addresses.

Just to be clear, are you saying you have your DCs connected directly to the Internet?  Or is the "156.x.x.x" network you allude to a private leased line/frame relay/other non-Internet connection?

If you've got two sites, aren't you getting *two* firewalls?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now