Cisco IPSec VPN and Windows 2012 Active Directory

[onyangoliech]

I have two sites A and B. Both sites have cisco routers installed with a permanent IPSec connection between the two sites. I also have two Windows 2012 servers one on each site, site A has the primary Domain Controller. Problem is the server in Site B can ping the one in site A, it can also use the DNS in site A, I can join a computer in site B to the server in Site A. I however cannot replicate this server in Site A on site B. is there a filter or some setting in IPSec that prevents replication of Windows Domain Controllers and if so how do I overcome this.

[nkarthikeyan]

hi,

do you have the inspect for netbios, ms-ds or any Qos between the two sites connected via IPsec?

Also you might need to fine tune with your MTU values.

Regards

Karthik

[onyangoliech]

I removed one domain controller and re-installed it and seemed to work. Thanks for the response