<div>
Thanks for advice, managed to get NATed exemption on AD.
</div>


Thanks for advice, managed to get NATed exemption on AD.

<div>
<div class="content wysiwyg-content">
Dear Expert,<br />
<br />
I need some advice pertaining on the windows 2008 AD - external domain-trust via NAT, DNS forwarding has been setup successfully from both sites, but can't seem to get the authentication working.<br />
<br />
I have 2 site connect via point-to-point VPN:<br />
<br />
Site A - AD Server IP 10.150.0.1<br />
Domain: domain-A.internal<br />
<br />
Site B - AD Server 10.10.0.1 &nbsp; (Original IP subnet)<br />
Site B - AD Server 10.190.1.1 (NAT IP Subnet back to Site A)<br />
Domain: domain-B.internal<br />
<br />
P/S: The NAT only applied on Site B.<br />
<br />
<u>Test result:</u><br />
AD Server (Site A) &nbsp;able to ping &nbsp;NAT AD Server (Site B)<br />
AD Server (Site B) &nbsp;able to ping &nbsp;AD Server (Site A)<br />
<br />
AD server (Site B) &nbsp;able to ping &nbsp;domain-A.internal<br />
AD server (Site A) &nbsp;can't ping &nbsp; domain-B.internal &nbsp;(somehow it's pinging actual IP 10.10.0.1 instead of NAT IP 10.190.1.1)
</div>
</div>


Dear Expert,

I need some advice pertaining on the windows 2008 AD - external domain-trust via NAT, DNS forwarding has been setup successfully from both sites, but can't seem to get the authentication working.

I have 2 site connect via point-to-point VPN:

Site A - AD Server IP 10.150.0.1
Domain: domain-A.internal

Site B - AD Server 10.10.0.1   (Original IP subnet)
Site B - AD Server 10.190.1.1 (NAT IP Subnet back to Site A)
Domain: domain-B.internal

P/S: The NAT only applied on Site B.

Test result:
AD Server (Site A)  able to ping  NAT AD Server (Site B)
AD Server (Site B)  able to ping  AD Server (Site A)

AD server (Site B)  able to ping  domain-A.internal
AD server (Site A)  can't ping   domain-B.internal  (somehow it's pinging actual IP 10.10.0.1 instead of NAT IP 10.190.1.1)

Domain Trust via NAT

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.