Multi-Nic Domain Controllers? Force DC traffic on 2nd NIC?

[sab4you]

I was thinking about security and an easy method to secure traffic between domain controllers.

Would it be possible to add a 2nd nic to each domain controller and put them on a private network. Then have all domain controller chatter be forced to use the private network?

This would still allow client workstations to use the normal public connection, but limit possible snooping since the DC traffic would be on the private network.

If so, how would one go about forcing the DC traffic to a different NIC?

 

[adcfaq]

adding 2nd NIC to DCs to hardening is not good idea, u will experenice mutil-home NIC issue when users log on.

u may take a look at the following link, it has DC part.

http://www.microsoft.com/technet/security/prodtech/windowsserver2003/W2003HG/SGCH00.mspx

---------------------------------------
Sr. Directory Services/Exchange Consultant

http://xhlu.8m.com

 

[sab4you]

Would it be better to configure the domain controllers to communicate to eachother using IPSec?

If so, does anybody know of any guides? I am currently searching for them, but if you know of any particularly good one, I am all ears

 

[schtek]

this might help..but not sure

if u right click my network places select properties then go to advanced then select advanced settings see which nic is top of your list ensure the one u want is top and apply
if a change is required it will require a reboot....

hope this helps u

"Ask not what your computer network can do for you - ask what you can do to the computer network to give you a quiet moment ."