Connect Access Domain Controller Over VPN

domain-controllergroup-policyvpnwindows-server-2012

We have a remote base which we would like to connect to our main office. We bought a VPN capable router thinking this would dial the vpn and our remote PC would connect seamlessly.

Unfortunately when the router dials the VPN it is given an IP address of 192.168.1.50. The address of the domain controller is 192.168.1.2 so the remote PCs cant find the domain controller.

I can manually set a network drive on the remote PC to point to the 192.168.1.50 address which allows us to browse files on the server however things like group policy fail to find the domain controller.

Update:
We have one server running windows server 2012 which is the domain controller and the VPN server in one.
We have a static IP address on the server which the VPN router dials.
Yes the router is installed at the remote location.
The router at the remote location is assigned the IP address of 192.168.1.50.

Can anyone help solve this?

Best Answer

Yes, it was DNS problem indeed.

Workstations can use DNS to discover where the domain controller is. They use DNS queries like _ldap._tcp.my_domain.com and others. VPN connection created point-to-point link between router and the domain controller and the peer ip of the domain controller (192.168.1.50) have become available to the router network.

Router should be configured to:

  • Add 192.168.1.50 as the first DNS server sent by the DHCP, second 192.168.5.1
  • Set "my_domain.com" as the DNS suffix sent to the DHCP clients.

After this the workstations should be able to detect the domain controller and start talking to it.

You may also:

  • Set 192.168.1.50 as the WINS server sent by the DHCP.
  • Add route "route add -net 192.168.1.0 netmask 255.255.255.0 dev ${ppp_if}" to make all other systems in the 192.168.1.0/24 network routable from the 192.168.5.0/24 netwotk if it's required.
Related Topic