I have a question, and I think this should work, but please shoot me down if it's not possible.
Our office is in California, and we have a branch out in Florida. We want to join the Florida's Windows Domain and create a Domain Controller here in California. Currently we have a permanent VPN tunnel (PIX to Netscreen) from Cali to FL and can share resources. Through this same tunnel, can I create DC in Cali to join the domain in FL? Do we have to be on the same subnet? For example, if FL is on the 10.1.1.0 subnet, do we in California have to be in the same subnet? or can we be on the same domain with a different subnet (192.168.1.0)? I want to be able to administer either Active directory. Any info or suggestions will be grateful. Thanks!
I dont see any problem either. When a host join a domain and try to retreive the group policy, they do so in udp. You might have to use a GPO to lower the MTU or force the WinXP/2000 to use TCP. The Mtu of the Win2003 server is lower by default and you dont have to do anything. (I have a few remotes sites that use centralize DCs)
From the windows perspective, no problems running Active Directory over a WAN or VPN connection. We are doing that currently. As long as the necessary traffic is allowed thru.
Becareful in Windows to ensure you define the:
c) replication frequency
If you have a large windows domain with a lot of objects, this replication can take the traffic up on the VPN...be sure it is only replicating on some interval such as every 30 or 60 minutes...even greater depending on how many changes take place in the directory.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...