IP adressing and active directory

[marty]

I've a question about the usage of two different Ip
ranges and active directory. I want to create an DMZ
where I can put an server with active directory. In the
Lan I also have the (root) active directory server. In
the DMZ I use a different IP range than In my Lan. Is it
possible to communicate with each other?

 

[Lanwench [MVP - Exchange]]

Don't put a domain controller in your DMZ.....this is not a good idea. You
have to open up way too many ports between DMZ and LAN for the DC to
communicate with the internal network/other DCs.

What is it you're trying to do?

 

[Andy]

-----Original Message-----
I've a question about the usage of two different Ip
ranges and active directory. I want to create an DMZ
where I can put an server with active directory. In the
Lan I also have the (root) active directory server. In
the DMZ I use a different IP range than In my Lan. Is it
possible to communicate with each other?
.
I don't see why it wouldn't work - it is just like

having 2 segments with a router between them. Those are
different subnets and that works. If there is a firewall
it might make things tricky, and it won't work across ISA.

 

[Tim Hines [MSFT]]

This is possible. There is a whitepaper that discusses this at

http://www.microsoft.com/downloads/...46-43f0-4caf-9767-a9166368434e&displaylang=en

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.