Monday, February 16, 2015

windows server 2012 - Connect Access Domain Controller Over VPN



We have a remote base which we would like to connect to our main office. We bought a VPN capable router thinking this would dial the vpn and our remote PC would connect seamlessly.




Unfortunately when the router dials the VPN it is given an IP address of 192.168.1.50. The address of the domain controller is 192.168.1.2 so the remote PCs cant find the domain controller.



I can manually set a network drive on the remote PC to point to the 192.168.1.50 address which allows us to browse files on the server however things like group policy fail to find the domain controller.



Update:
We have one server running windows server 2012 which is the domain controller and the VPN server in one.
We have a static IP address on the server which the VPN router dials.
Yes the router is installed at the remote location.
The router at the remote location is assigned the IP address of 192.168.1.50.




Can anyone help solve this?


Answer



Yes, it was DNS problem indeed.



Workstations can use DNS to discover where the domain controller is. They use DNS queries like _ldap._tcp.my_domain.com and others. VPN connection created point-to-point link between router and the domain controller and the peer ip of the domain controller (192.168.1.50) have become available to the router network.



Router should be configured to:





  • Add 192.168.1.50 as the first DNS server sent by the DHCP, second 192.168.5.1

  • Set "my_domain.com" as the DNS suffix sent to the DHCP clients.



After this the workstations should be able to detect the domain controller and start talking to it.



You may also:




  • Set 192.168.1.50 as the WINS server sent by the DHCP.


  • Add route "route add -net 192.168.1.0 netmask 255.255.255.0 dev ${ppp_if}" to make all other systems in the 192.168.1.0/24 network routable from the 192.168.5.0/24 netwotk if it's required.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...