DNS Help Urgently Needed!!!!

[briteeyez]

My network is configured as follows:

Windows 2000 Server is given a fixed IP address - 192.168.x.x. I have DHCP running from my firewall, Netscreen running as the DHCP server. DNS is installed as Active Directory integrated on Server A. WINS is not installed. I have two servers running in this environment. The first one is the PDC, Server A, and second one is also running Windows 2000 Server and Exchange 5.5 (mail server), Server B. The full DNS name is myserver.comanyname.com.

My problem is as follows:

I have a sister company located in Toronto also running Windows 2000, and they are on a separate domain from myself. I have configured a VPN tunnel between the two offices and I now need to setup a trust relationship between the two offices. In order for this to occur I realise I need the two server to comunicate with each other. I could ping by IP across the tunnel succesfully.

Within my domain I added a Standard Primary Zone and added a Hosts record with the remote site information. This allowed me to ping by name across the tunnel. However when I tried setting up the trust relationship I am getting the error "the domain of remote site name cannot be contacted".

What do I need to do to allow the two DNS server to communicate with each other across the tunnel to ensure that my trust works.

Can someone outline the necessary steps I need to follow to get this to work.

Any help would be greatly appreciated.

Thanks

 

[doomhamur]

Hello, how about this.

Domain A, Server A - 2 DNS Zones -
1. AD integrated, primary zone for Domain A. Domain B, Server A given permision to recieve updates via IP address
2. Secondary Zone for Domain B
3. Primary inverse arp zone for domain A
4. Secondary invers arpa zone for domain B

Domain B, server A - 2 DNS Zones
1. AD integrated, primary zone for Domain B. Domain A, Server A given permision to recieve updates via IP address
2. Secondary Zone for Domain A
3. Primary inverse arp zone for domain B
4. Secondary invers arpa zone for domain A

Use the ip address to assing the permisions. give the servers 20 min to talk before trying to ping. Be sure you can ping using full dns name.

Have a nice day Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."

 

[briteeyez]

i setup the zone on the remote end to allow zone transfers only to my dns server, however when i try to setup the standard secondary zone on my end i am getting the error - "cannot locate master server". also am i suppose to add the remote site dns server to my name server tab.

what else am i missing. this domain is two separate trees. is what i am doing really possible.

thanks

 

[briteeyez]

I got it done.

Thanks so much.