Domain across subnets - Cannot join RPC error

Discussion in 'Active Directory' started by Alexander Alexeev, Dec 6, 2005.

  1. Hi there,

    There's an issue with operating a Windows 2003 AD domain across two subnets.

    The are two offices of the same company within one town. Recently the second
    one got wired up with a permanent cable link and is connected to the main
    office via VLAN. Main Office has LAN 192.168.10.0/24 and Branch office has
    LAN 192.168.12.0/24, which has to be joined to the main office's domain. The
    plan is to raise a DC at the Branch and tweak the replication intervals to
    go over the VLAN link, bandwidth permits that okay.

    Now, the link is working fine. The firewall of the Main Office LAN, which is
    ISA 2004, has been setup to ROUTE the traffic between the subnets instead of
    NAT and also all-permitting rule in both directions was added. When we try
    to join the to-be-DC server at the Branch error comes up:

    The remote procedure call failed...

    The DNS for the joining server has been setup to be the DC at Main Office,
    so that's fine. It's connecting to it okay and in fact can open fine any
    network shares that we have in the 192.168.10.0 network (obviously the
    username/password prompt comes up aksing for domain credentials).

    NSLOOKUP resolves all hosts fine.

    I am puzzled. Any ideas what else to try for resolution?

    Thank you.
    Alex A
     
    Alexander Alexeev, Dec 6, 2005
    #1
    1. Advertisements

  2. Alexander Alexeev

    Paul Bergson Guest

    The quickest way to check port traffic on both sides is to run portqry.
    http://support.microsoft.com/default.aspx?kbid=832919

    It souns like the rpc port is blocked, portqry has built in ports to scan.

    --


    Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Paul Bergson, Dec 6, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.