Active directory Sites and services

[joh]

Hi All,

I have one Active directory site and am in the process of
adding another. Firstly, In Active Directory Sites and
Services, there is the default first site, which is
created when you install AD, should I add the subnets of
the first site to that site. Secondly I would create a new
sitelink and add the subnets of the second site to it?
Thirdly, I have a vpn connection between the sites with a
Cisco firewall; what ports need to be opened on the
firewall to get replication etc working?

As usual, Thanks.

 

[Simon Geary]

You should rename the default first site name to whatever you want and add
the subnets from your first site to it.

You don't add subnets to site links, rather you add them to sites. Create a
second site in AD for your second physical site and add the subnets to that.
Then you can create a site link between the two sites.

Have a read of this to check what ports you need to open for AD.
http://support.microsoft.com/?id=289241
As you have a VPN, the process is simplified and you just need to open the
VPN ports. Everything will flow through the VPN without you having to open
all those ports in your firewall.