Join 2 networks with Win2k Server w/ domain support?

foxkm

Senior member
Dec 11, 2002
229
0
0
Is it possible to join 2 private networks (both connected to internet via broadband) with win2k server so they are VLANd (same network via vpn) so the network is seamless at both locations? Mainly want to merge a 2 seperate AD domains into one AD domain with both sites having a AD Server and one would be desiginated a backup...

KMF
 

ktwebb

Platinum Member
Nov 20, 1999
2,488
1
0
Windows 2000 has a remote access VPN server built in. I'd be suspect of the reliability of a broadband connection, even a business class one if this would be a mission critical link however it would work. Bandwidth would be another concern. You just didn't give enough info to get elaborate but as a simple question the simple answer is yes, setup a VPN server on one of the servers.
 

yoda291

Diamond Member
Aug 11, 2001
5,079
0
0

Merging 2 AD domains into a single AD is actually a little more complicated than changing their layer 3 addressing schema. I assume this is something you've had experience with before? really, you can screw up all kinds of things doing something like this if you're not careful. I would probably just make a trust relationship between the two domains and leave it at that.

but from a networking standpoint, you want a tunnel. In terms of business class, you want something with an SLA like a frame relay/ATM or PTP Ethernet. If you want to just bank on the internet connection you have, a better solution is to have seperate boxes create a point to point tunnel between the two networks and create static routes between the two disparate subnets. You could even do a router-to-router tunnel to cut down on the costs. OpenBSD has the software to do this out of the box. If you google "openbsd isakmpd tunnel" that should point you in the right direction. essentially, all packets destined for the remote network traverse the packet and higher level protocols/apps will see it as a locally attached network segment.
 

Wizkid

Platinum Member
Oct 11, 1999
2,728
0
0
If you want to be cheap, just use two Linksys BEFSX41 boxes (one on each end of the tunnel). I currently have this running for a client and it works very well.
 

azev

Golden Member
Jan 27, 2001
1,003
0
76
you want to merge 2 domains together and have a single domain instead ? hmmm that sounds rather complicated. At first I thought you want to have a trust relationship between the two domain so they can communicate with each other via VPN. Merging 2 domain to single namespace is not a easy task.