Re: AD Replication over SonicWall site-to-site VPN

The normal problem here is MTU's. The VPN tunnel reduces the MTU size but
forgets to tell the servers. Packets fragment and replication fails. I can't
tell you the right solution for your network but you can experiment using
the knowledgebase stuff about defining MTU size on the servers. Its fairly
harmless to experiment as reducing the MTU size just affects efficiency. I
don't like manually setting the server MTU size as a solution though.
Anthony



"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:OC96s9vtGHA.5056@xxxxxxxxxxxxxxxxxxxxxxx
Inline

Is it safe to infer that, by virtue of the VPN to VPN connection, no
ports
would be blocked? As I said, I have seen the firewall rules and know
that
there are no explicit prohibitions on any of the ports required.

This depends of some FWs, we have some firewalls that we can restrict VPN
traffic.
to have sure run this:
Description of the Portqry.exe command-line utility
http://support.microsoft.com/kb/310099/

If everything Ok, then make sure that the Servers have the correct
gateway, that the network is fully routed, and that the DNS is setup
correctly

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Markb1118" <Markb1118@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C76A63F7-DA97-42F1-8FCF-AE102D612470@xxxxxxxxxxxxxxxx
Thank you for the reply Jorge.

All of the servers can ping one another back and forth. I have
previously
reviewed the articles you mentioned and have applied any and all
knowlege/fixes/etc. to no avail.

Is it safe to infer that, by virtue of the VPN to VPN connection, no
ports
would be blocked? As I said, I have seen the firewall rules and know
that
there are no explicit prohibitions on any of the ports required.

FWIW, I have a ticket open with the firewall vendor. Thanks again to any
and all who reply.

MB

"Jorge Silva" wrote:

Hi
Can you ping the server

By default, Active Directory replication over RPC (Remote Procedure
Calls)
takes place dynamically over an available port via the RPC Endpoint
Mapper
(RPCSS) using port 135;
Application protocol Protocol Ports
Global Catalog Server TCP 3269
Global Catalog Server TCP 3268
LDAP Server TCP 389
LDAP Server UDP 389
LDAP SSL TCP 636
LDAP SSL UDP 636
IPsec ISAKMP UDP 500
NAT-T UDP 4500
RPC TCP 135
RPC randomly allocated high TCP ports TCP 1024 - 65536
832017 Service overview and network port requirements for the Windows
Server system
http://support.microsoft.com/default.aspx?scid=kb;EN-US;832017
224196 Restricting Active Directory replication traffic to a specific
port
http://support.microsoft.com/default.aspx?scid=kb;EN-US;224196

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Markb1118" <Markb1118@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FFC24485-6D01-405F-91FF-3C4A8A6CB3F9@xxxxxxxxxxxxxxxx
Boy did I get in a hurry. The most frequent reference is to the RPC
Server
being unavailable.

"Markb1118" wrote:

Had a working multi-site Windows 2003 domain. Replication was
happening
cleanly and on schedule. In June, implemented a SonicWall 2040 at the
home
office and SonicWall TZ-170s at the remote offices and connected via
site-to-site VPN. Now, the domain controllers will not replicate. The
most
frequent reference is to I have been through all of the available
troubleshooting steps and nothing has resolved the problem.

I did not do the firewall configuration but it seems pretty straight
forward. I have seen for myself that there are no rules in place
restricting
any traffic on VPN to VPN connections.

Any advice, help, even the smallest tid-bit would be appreciated.
Thanks
in
advance.







.

Relevant Pages

  • RE: PPTP remote access ports dissapear - HELP PLEASE!
    ... ports disappear from the RRAS console. ... Based on my research, SBS have wizard to configure the VPN, we do not need ... Please open Routing and Remote Access console on SBS thru run command ... You have to rerun the CEICW to make sure your SBS 2003 server have right ...
    (microsoft.public.windows.server.sbs)
  • RE: PPTP remote access ports dissapear - HELP PLEASE!
    ... ports disappear from the RRAS console. ... Based on my research, SBS have wizard to configure the VPN, we do not need ... Please open Routing and Remote Access console on SBS thru run command ... You have to rerun the CEICW to make sure your SBS 2003 server have right ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN times out on connect
    ... There are two NIC installed on the SBS server. ... are in the same subnet) and then manually create a VPN dial entry. ... We also can use the PPTP Ping tool included in Windows XP Support tools ... to check whether the ports are opened to allow VPN connection. ...
    (microsoft.public.windows.server.sbs)
  • Re: vpn access from hotel room
    ... screening any ports, it will automatically forward any requests on ports to ... your SBS box and ISA will determine if it is allowed to pass through to the ... VPN is a bit more difficult to setup as you'll need to configure an ISA ... I do not understand how i can access the server from the internet through ...
    (microsoft.public.windows.server.sbs)
  • Re: AD Replication over SonicWall site-to-site VPN
    ... The MTU can be an Issue: ... Test your MTU from the problem server by pinging the gateway of your router: ... Kerberos authentication service to use TCP instead of UDP. ... there are no explicit prohibitions on any of the ports required. ...
    (microsoft.public.windows.server.active_directory)
Loading