Cannot connect to Domain Controller

I setup and configured a new dc at one of my companies locations. Between Office1 and Office2 (new dc), we have a site-to-site vpn tunnel. I can ping devices at Office1 from Office2 just fine but I can't ping the virtual host which is where the new dc lives. From the new dc I can ping other dc's on my network just fine but I can't ping the new dc from the other dc's. There are other servers at Office2 that I can ping and remote into from Office1 but for some reason I can't ping or remote into the virtual host. To get to the virtual host I have to remote into a different server in Office2 then remote into the virtual host.

Dawin DaiseSr. Windows Systems AdministratorAsked: 2016-08-18

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get every solution instantly with Premium. Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 31

MASEE Solution Guide - Technical Dept HeadCommented: 2016-08-18

Hi,
Ensure firewall is not enabled in your new DC.
Attached screenshot for your reference click on " Turn Windows Firewall on or off" .

Thanks
MAS
windows-server-2012-enable-disable-f.jpg

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 40

Aaron TomoskyDirector of Solutions ConsultingCommented: 2016-08-18

Agree, it's probably Windows firewall as some of the default policies only allow local subnet access.

LVL 44

Steve KnightIT ConsultancyCommented: 2016-08-19

Soryy if this sounds too obvious but have seen it too many timed - is IP comms working at all, e.g. default gateway points elsewhere or you have the wrong subnet mask or second nic with an ip from the other site.

Check routing table with route print from cmd and tracer or pathping with ip of other site to see where it stops.

Where does your site vpn come in - from a server or same router as internet. If your default gateway points out to a local Internet connection you might need a static route on there too your other site via the vpn device.

Steve