Guest inenewbl Posted May 8, 2008 Posted May 8, 2008 Hi all. I have a small office with a few domain client PCs. The DCs are housed in my main office. The small office is located in another location away from the main office and both offices are connected using a lease line. We are using a firewall to restrict traffic coming from the small office into the main office. Hence i would like to know what port should i open to allow the domain PCs in the small office to be able to authenticate to the DC upon logon. Thks in advance.
Guest Ace Fekay [MVP] Posted May 8, 2008 Posted May 8, 2008 Re: what port is domain authentication using. In news:77C5F8C7-CC7F-4AB5-824E-4D256BE7AF2C@microsoft.com, inenewbl <inenewbl@discussions.microsoft.com> typed: > Hi all. I have a small office with a few domain client PCs. The DCs > are housed in my main office. The small office is located in another > location away from the main office and both offices are connected > using a lease line. We are using a firewall to restrict traffic > coming from the small office into the main office. Hence i would like > to know what port should i open to allow the domain PCs in the small > office to be able to authenticate to the DC upon logon. Thks in > advance. There are about 29 ports, including UDP >1023 all inclusive. Your better bet is to create a wide open VPN tunnel between your hardware firewalls, that is if they are capable of doing so. This way they will connect the two offices by their internal subnets and not thru the firewall. And if you are using NAT, you will NEED a VPN because necessary traffic CANNOT traverse a NAT unless using a tunnel based VPN that uses the NAT devices as the endpoint. If you really want to know what ports they are, here you go. But I think it will swiss cheese the firewall with too many ports opened. Active Directory Replication over Firewalls http://technet.microsoft.com/en-us/library/bb727063.aspx -- Regards, Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP Microsoft MVP - Directory Services Microsoft Certified Trainer For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers. Infinite Diversities in Infinite Combinations
Guest inenewbl Posted May 8, 2008 Posted May 8, 2008 Re: what port is domain authentication using. Hi Ace, Thk you for the reply. Your website seems to be for win2000 server, can it be applied for win2003 as well? My DC is of win2003. "Ace Fekay [MVP]" wrote: > In news:77C5F8C7-CC7F-4AB5-824E-4D256BE7AF2C@microsoft.com, > inenewbl <inenewbl@discussions.microsoft.com> typed: > > Hi all. I have a small office with a few domain client PCs. The DCs > > are housed in my main office. The small office is located in another > > location away from the main office and both offices are connected > > using a lease line. We are using a firewall to restrict traffic > > coming from the small office into the main office. Hence i would like > > to know what port should i open to allow the domain PCs in the small > > office to be able to authenticate to the DC upon logon. Thks in > > advance. > > There are about 29 ports, including UDP >1023 all inclusive. Your better bet > is to create a wide open VPN tunnel between your hardware firewalls, that is > if they are capable of doing so. This way they will connect the two offices > by their internal subnets and not thru the firewall. And if you are using > NAT, you will NEED a VPN because necessary traffic CANNOT traverse a NAT > unless using a tunnel based VPN that uses the NAT devices as the endpoint. > > If you really want to know what ports they are, here you go. But I think it > will swiss cheese the firewall with too many ports opened. > > Active Directory Replication over Firewalls > http://technet.microsoft.com/en-us/library/bb727063.aspx > > -- > Regards, > Ace > > This posting is provided "AS-IS" with no warranties or guarantees and > confers no rights. > > Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, > MVP Microsoft MVP - Directory Services > Microsoft Certified Trainer > > For urgent issues, you may want to contact Microsoft PSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Infinite Diversities in Infinite Combinations > > >
Guest Herb Martin Posted May 8, 2008 Posted May 8, 2008 Re: what port is domain authentication using. "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message news:F4F6267D-D1EC-4F03-8B78-2CE440841F6C@microsoft.com... > Hi Ace, > > Thk you for the reply. > Your website seems to be for win2000 server, can it be applied for win2003 > as well? My DC is of win2003. They are largely the same. Win2003 has some very nice additional featurs but 2003 and even 2008 are not major departures from Win2000. > "Ace Fekay [MVP]" wrote: > >> In news:77C5F8C7-CC7F-4AB5-824E-4D256BE7AF2C@microsoft.com, >> inenewbl <inenewbl@discussions.microsoft.com> typed: >> > Hi all. I have a small office with a few domain client PCs. The DCs >> > are housed in my main office. The small office is located in another >> > location away from the main office and both offices are connected >> > using a lease line. We are using a firewall to restrict traffic >> > coming from the small office into the main office. Hence i would like >> > to know what port should i open to allow the domain PCs in the small >> > office to be able to authenticate to the DC upon logon. Thks in >> > advance. >> >> There are about 29 ports, including UDP >1023 all inclusive. Your better >> bet >> is to create a wide open VPN tunnel between your hardware firewalls, that >> is >> if they are capable of doing so. This way they will connect the two >> offices >> by their internal subnets and not thru the firewall. And if you are using >> NAT, you will NEED a VPN because necessary traffic CANNOT traverse a NAT >> unless using a tunnel based VPN that uses the NAT devices as the >> endpoint. >> >> If you really want to know what ports they are, here you go. But I think >> it >> will swiss cheese the firewall with too many ports opened. >> >> Active Directory Replication over Firewalls >> http://technet.microsoft.com/en-us/library/bb727063.aspx >> >> -- >> Regards, >> Ace >> >> This posting is provided "AS-IS" with no warranties or guarantees and >> confers no rights. >> >> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, >> MVP Microsoft MVP - Directory Services >> Microsoft Certified Trainer >> >> For urgent issues, you may want to contact Microsoft PSS directly. Please >> check http://support.microsoft.com for regional support phone numbers. >> >> Infinite Diversities in Infinite Combinations >> >> >>
Guest Ace Fekay [MVP] Posted May 9, 2008 Posted May 9, 2008 Re: what port is domain authentication using. In news:uuyrQzPsIHA.1236@TK2MSFTNGP02.phx.gbl, Herb Martin <news@learnquick.com> typed: > "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message > news:F4F6267D-D1EC-4F03-8B78-2CE440841F6C@microsoft.com... > > Hi Ace, > > > > Thk you for the reply. > > Your website seems to be for win2000 server, can it be applied for > > win2003 as well? My DC is of win2003. > > They are largely the same. Win2003 has some very nice additional > featurs but 2003 and even 2008 are not major departures from Win2000. I agree! Ace
Recommended Posts