RE: Active Directory New Site

Hi Chris,

I really like the Cisco 800 platform as a router (That's what I use at
home.) but if you are using lower end equipment in your network (netgear) you
could continue like that.

The internal uplink to the router would be on your 192.168.16.0/24 network
and I would put the other end in 192.168.32.0/24 and route between them. I
like to split on the eights (0,8,16,32) in case you have to group your class
c subnets against a mask and this arrangement allows you to be more efficient
in your ACLs.

Hope this helps.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"Chris White" wrote:

Hey Ryan,

Thanks for your input.

Right now I'm struggling to find a cost effective router.

I guess the Cisco 850 Router Model would do it? But as the router contains
switched ports I didn't know if it would just function as another switch in
my environment and be a waste of time? I need the router to act as a bridge
between the two networks.

Here's my network plan:
http://i34.photobucket.com/albums/d122/ChrizRockster/work/The-Plan-O-Deathv2.gif

Cheers.
--
Chris White
United Kingdom


"Ryan Hanisco" wrote:

This is exactly what I would do here. I'd use an additional router and set
up the sites exactly as you've outlined.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"Chris White" wrote:

Hey guys,

Thanks for your replies so far.

I was warned off the RRAS service for this type of network challenge.

We have some good rack routers just sitting in the cuboard.

Would it be as simple as putting the router between the existing switch, and
a new switch with the second redundant server/dfs replica on? Then using AD
Sites and Services to create a new site, then inside that, the server object
and subnet object for that server?

I know this is a networking question really, but I know you guys are very
multi-skilled.

Thanks for your time!
--
Chris White
United Kingdom


"Ryan Hanisco" wrote:

Hi Everyone,

Multihomed DCs are more trouble than they are worth and can lead to all
kinds of replication fun. Tim does make a good point, though.

The piece of equipment you are missing is a router to get you from one
network to another -- this could be inter-VLAN routing on a switch, a
physical router, or a server running RRAS to route between the NICs.

If you have the equipment and enterprise need to justify an additional site
for redundancy, you would probably be better served acquiring the network
equipment to do it correctly. I am a big fan of only asking equipment to do
what is in its sweet spot. This means avoiding routing on servers,
especially DCs, if at all possible.

If you're stuck with home class equipment like linksys, you might be better
off getting a combo router/ switch for $40 and using the uplink port to
connect back to your main LAN segment. You'll have to work a little more for
it, but it'll be much more stable. Of course, I would strongly suggest
investing in Cisco gear, but I'm sure you would have already if it were just
that easy.

Cheers,
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"Tim" wrote:

Here's an outside the box solution. Put 2 NICs in the server and use
routing and remote access to actually create a second network. Real site,
real subnet. No VLANs or switch configs.

Tim

"Chris White" wrote:

Hi there,

So I have been discussing a project with a MVP on another newsgroup and know
what i need to achieve. Just need help with it.

Basically i need to create a "fake" site.

I have 2 DFS-Store servers (2 servers with a copy of the same data).

I need to put the second on a new site, with a VLAN on my switch so DFS
thinks its an Off-Site replica. When really it would help me resolve my
failover requirements.

So....

Hand Built PC - SBS2003 SP1
DFS-Catalogue - Brand New Dell PowerEdge 860 - 2003 R2
DFS-Store1 - Brand New Dell PowerEdge 860 - 2003 R2
DFS-Store2 - Brand New Dell PowerEdge 860 - 2003 R2

DFS-Catalogue : ---> DFS-Store1 (Master)
: ---> DFS-Store2 (Replica on fake new site & new
subnet)

I need to create a way, in AD, to add a new site, and a new subnet for my
VLAN and then physically link into that VLAN somehow? I dont understand how i
need to link the existing switched machines to a VLAN port group. The Netgear
GS725T Switch doesn't offer the chance to assign a Subnet to the new created
VLAN port-group.

Basically need to trick AD into thinking that the DFS-Store2 is on another
site, and put a higher cost on that connection. So users on the first site
talk to the DFS-Store1 only. But need to create a route so that, if
DFS-Store1 was down, the users would be switched over to DFS-Store2 on what
seems to be another site.

Thanks in advance.
--
Chris White
United Kingdom
.

Relevant Pages

  • Re: VPN over wireless
    ... Support with a Cisco Switch it would work. ... on my network - and no success. ... You will still the need the Router to issue DHCP and ...
    (microsoft.public.windows.server.sbs)
  • RE: Active Directory New Site
    ... I was warned off the RRAS service for this type of network challenge. ... a new switch with the second redundant server/dfs replica on? ... Sites and Services to create a new site, then inside that, the server object ... The piece of equipment you are missing is a router to get you from one ...
    (microsoft.public.windows.server.active_directory)
  • Re: Ethernet network wiring ?s
    ... >>> Thanks for the help and network education. ... your router will assign all 5 computers unique IP ... >> even if there are several cascaded ethernet switches and only one cable ... >> switch in that room. ...
    (comp.sys.mac.hardware.misc)
  • Re: Can this be done? Diagnostic Tool
    ... > A linux box with two interfaces that I could drop into any ... > network, for example between the router and the switch, without ... > of traffic at that point in the network. ... a cable going to the router, and a cable going to the switch, you could ...
    (comp.os.linux.networking)
  • RE: [Full-Disclosure] DCOM RPC exploit (dcom.c)
    ... > route leads to too many failures (you switch to the slightly more ... > better fit equipment. ... Then they had to retrofit the network. ...
    (Full-Disclosure)