2 AD network & 2 DHCP server on same subnet, Possible?

evo800v · 30th November 2010, 5:03 PM

Guys,

I've got two division from two physical floor needing to merge for print/file sharing. Problem is one network is a 192.168.1.x while the other one is a 10.3.8.x network.

My thought is change the 10.3.8.x into a 192.168.1.x with 2 AD integrated serving IP for that AD group only, has anyone done this? and what potential disaster could there be with such a radical change as essentially we need both systems to talk to each other for file & print sharing.

Without putting a layer 3 switch, can anyone suggest the best approach.

cheers

psyco18 · 30th November 2010, 5:16 PM

Just a suggestion, Put a second nic in the server ad run the second subnet through it.

evo800v · 30th November 2010, 5:22 PM

cant do that, all PCs need to communicate to 4 servers & all printers.

MikHail · 30th November 2010, 6:01 PM

Are your printers Published in AD?

evo800v · 30th November 2010, 6:38 PM

yeap, all printers are under win2003 AD. Setting up trusts for the two AD isnt the issue. Its the 2 DHCP server on the same subnet. maybe setup 2 different scope say 192.168.1.1 - 192.168.1.150 for one DHCP AD & 192.168.151 - 192.168.1.254 for one DHCP AD.

Will this work? or PC will have leasing/renewing addressing problem, especially with DNS registration as well.

Iceman · 30th November 2010, 9:25 PM

Quote:

Originally Posted by evo800v

My thought is change the 10.3.8.x into a 192.168.1.x with 2 AD integrated serving IP for that AD group only, has anyone done this? and what potential disaster could there be with such a radical change as essentially we need both systems to talk to each other for file & print sharing.

And you're going to integrate DNS between the two AD networks.. how?

NSanity · 30th November 2010, 9:27 PM

You should consider looking into Trusts...

Glide · 30th November 2010, 9:30 PM

1 dhcp, 1 dns

dns forwarder to the other server

done

or you can force dns via gpo too

Hive · 30th November 2010, 9:57 PM

Quote:

Originally Posted by Glide

1 dhcp, 1 dns

dns forwarder to the other server

done

or you can force dns via gpo too

Very true

Iceman · 1st December 2010, 10:15 AM

Quote:

Originally Posted by Glide

1 dhcp, 1 dns

dns forwarder to the other server

done

or you can force dns via gpo too

If it's purely file/print sharing this might be OK. Where are the exchange servers though? One per 'floor'? If so you probably won't get away without a domain trust. Various MS techs worm their way into MS and while I haven't tried it, I'd say most of them aren't crazy about having to update a foreign, non trusted AD-DNS.

hutsy · 1st December 2010, 12:05 PM

It sounds like you just need to route the subnets properly?

What are you using for default the gateway on each subnet? If it's a windows server then just add an IP in the other networks range and setup the correct routes. If it's an all-in-one ADSL modem router, then you might not be so lucky (although some can still do this type of thing).

Yak · 1st December 2010, 7:43 PM

Quote:

Originally Posted by evo800v

Guys,

I've got two division from two physical floor needing to merge for print/file sharing. Problem is one network is a 192.168.1.x while the other one is a 10.3.8.x network.

Without putting a layer 3 switch, can anyone suggest the best approach.

DHCP is going to be your problem.
It's a broadcast, so you will have to segment/bridge the networks somehow.
Classes, or mac address ranges MIGHT work, but maintaining that would be harder than a spreadsheet with statics..

Every solution has it's pro's & con's..
Dual NICS.. multi homed windows DC's can get "grumpy" sometimes,

VLAN's might be the best solution and switches are not too pricy... (heck) even my billion ADSL modem has them!

If one network is happy to piggy back out of the "bigger" network you could "bridge" the network using something like monowall.

Otherwise you could look into http://www.vyatta.com/

Yak.

ruro · 1st December 2010, 7:53 PM

Are you really keen to keep your ip addresses? Just give them a larger network, it will save you headaches.

thetron · 1st December 2010, 9:26 PM

Quote:

Originally Posted by IACSecurity

Surely a router (or routing enabled a server) and AD Trusts will fix the problem?

i'd want to reimage all the machines qnd migrate all the users, ou and groups under one domain

What you don't need is duplication of users, settings and permissions. its messy for supporting and annoy users. FOR EXAMPLE the QLD Gov department of environment and resource management has this setup

In the month when I was working for derm (My contract end) you'd have two domains like the original poster. Because the department had merged with together with another government department the IT boffins didn't want to change anything immediately and would slowly migrate user away from one 'weaker' domain to a single domain.

However IT boffins are scared they will break shit for some users would heavily rely on the old weaker domain being faced out. Seems like this domain won't die cause the dumb boffins are AD nubs I reckon

evo800v · 2nd December 2010, 10:35 AM

Been thinking into the problem, having two dhcp, dns is too much headache to support.

One of the AD domain only has 30 PCs connected, so we are considering removing AD and add it to the main one as member servers. There will be some work on the server with migrating users, printers, permissions. Clients in terms of desktop profile, printers, etc

We dont have exchange server so removing AD will be easier as well, long term is better supporting one AD than two.

30th November 2010, 5:03 PM	#1
evo800v Member Join Date: Jul 2004 Location: Australia, Sydney, NtRyde Posts: 474	2 AD network & 2 DHCP server on same subnet, Possible? Guys, I've got two division from two physical floor needing to merge for print/file sharing. Problem is one network is a 192.168.1.x while the other one is a 10.3.8.x network. My thought is change the 10.3.8.x into a 192.168.1.x with 2 AD integrated serving IP for that AD group only, has anyone done this? and what potential disaster could there be with such a radical change as essentially we need both systems to talk to each other for file & print sharing. Without putting a layer 3 switch, can anyone suggest the best approach. cheers

30th November 2010, 5:16 PM	#2
psyco18 Member Join Date: Jan 2004 Location: 3172 Posts: 287	Just a suggestion, Put a second nic in the server ad run the second subnet through it. __________________ www.gaming-biz.net Cheap Gaming Servers!

30th November 2010, 9:27 PM	#7
NSanity Member Join Date: Mar 2002 Location: Bathurst, NSW Posts: 6,856	You should consider looking into Trusts... __________________ Intel i7-3770k @ stock \| Asus P8Z77 WS \| 32GB Corsair Vengeance 1866 10-11-10-30 \| 2x EVGA GTX670 SLI FTW @ stock \| 1x Dell U3011 \| OCZ Revodrive3 X2 MAXIOPS 480GB \| Western Digital 2TB Caviar Black \| Asus Essence STX \| Audio-Technica ATH-AD900 \| Antec HCP-1200 \| Enermax Fulmo GT Midtower \| Synology DS2411+ NAS \| 12x Seagate 2TB 7200.12 i'm in your noun, verbing your related noun.

1st December 2010, 12:05 PM	#11
hutsy Member Join Date: Dec 2004 Location: Perth Posts: 185	It sounds like you just need to route the subnets properly? What are you using for default the gateway on each subnet? If it's a windows server then just add an IP in the other networks range and setup the correct routes. If it's an all-in-one ADSL modem router, then you might not be so lucky (although some can still do this type of thing). __________________ http://www.outofgear.com/ocau/quote.png My Rig: Core I7 920 \| Asus P6T-Deluxe \| 6GB (3 x 2GB) 1600Mhz Corsair Dominator \| ASUS GTX260 \| Pioneer DVR-216 \| 2 x 147G Cheetah 15K SAS (OS/APPS - RAID 0) \| 5 x WD Black 1TB (DATA - RAID 5) \| Antec Nine Hundred TWO \| Antec True Power Quattro 850W \| Samsung 2443BW 24" 1080p \| Windows 7 Ultimate 64-bit

30th November 2010, 5:22 PM	#3
evo800v Member Join Date: Jul 2004 Location: Australia, Sydney, NtRyde Posts: 474	cant do that, all PCs need to communicate to 4 servers & all printers.

30th November 2010, 6:01 PM	#4
MikHail Member Join Date: Feb 2003 Location: Sydney Posts: 332	Are your printers Published in AD?

30th November 2010, 6:38 PM	#5
evo800v Member Join Date: Jul 2004 Location: Australia, Sydney, NtRyde Posts: 474	yeap, all printers are under win2003 AD. Setting up trusts for the two AD isnt the issue. Its the 2 DHCP server on the same subnet. maybe setup 2 different scope say 192.168.1.1 - 192.168.1.150 for one DHCP AD & 192.168.151 - 192.168.1.254 for one DHCP AD. Will this work? or PC will have leasing/renewing addressing problem, especially with DNS registration as well.

30th November 2010, 9:30 PM	#8
Glide Member Join Date: Aug 2002 Location: Sydney Posts: 1,066	1 dhcp, 1 dns dns forwarder to the other server done or you can force dns via gpo too

1st December 2010, 7:53 PM	#13
ruro Member Join Date: Jun 2009 Location: Brisbane, Australia Posts: 259	Are you really keen to keep your ip addresses? Just give them a larger network, it will save you headaches.

2nd December 2010, 10:35 AM	#15
evo800v Member Join Date: Jul 2004 Location: Australia, Sydney, NtRyde Posts: 474	Been thinking into the problem, having two dhcp, dns is too much headache to support. One of the AD domain only has 30 PCs connected, so we are considering removing AD and add it to the main one as member servers. There will be some work on the server with migrating users, printers, permissions. Clients in terms of desktop profile, printers, etc We dont have exchange server so removing AD will be easier as well, long term is better supporting one AD than two.