There are a number of ports with TCP and UDP/TCP required that must be available for full communication from DC to DC to succeed.  Likely one or more of these are blocked and a ping is great for basic connectivity.
 
From both sides of the VPN, run DCDIAG /v > dcdiag.log and a netdiag /v >netdiag.log
 
Send those pack to us in the list and we'll help you through.
 
As a quick test, try telnet <name or IP of DC> 389, where <name or IP of DC> is the DC on the other side of the VPN.  Do from both sides.  this is just one of the ports that you need.  Another would be 445.
 
Rick [msft]

--
Posting is provided "AS IS", and confers no rights or warranties ...
 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Williams
Sent: Tuesday, October 18, 2005 10:40 AM
To: [email protected]
Subject: [ActiveDir] DC replication

We just installed a server offsite. It is connected by VPN through a PIX 525 and a PIX 501. After installing it, it was decided that it needs to be a domain controller. Ran dcpromo on it and there were no errors reported. The problem I have with it now is that it seems to be replicating in one direction only.
 
All DC's running 2000 server.
 
Active Directory Sites & Services on DC01 and DC02 has all 3 servers listed. DC01 and DC02 do not show any entries in the NTDS settings for DC03. DC03 shows the correct entries for all 3 servers. If I manually add a new active directory connection from DC01 or DC02, it shows all 3 of the DC's in the selection box. After adding it and selecting replicate now, I receive the RPC server is unavailable error.
 
That error refers to DNS errors. I can ping by name to all DC's. Are there other tests I need to run to check DNS?
 
Repadmin shows correct inbound and outbound neighbors on DC01 and DC02. DC03 shows correct inbound neighbors, but no outbound neighbors.

DC01 - Main domain controller at main office
DC02 - Secondary domain controller at main office
DC03 - New domain controller at offsite location, VPN connection
 
Thanks in advance
 
Mike

Michael P. Williams
Information Technology
Carlyle Van Lines
(660) 747-8128 X 3816
[EMAIL PROTECTED]
www.carlylevanlines.com

 

Reply via email to