VPN so AD can Replication over the Internet

[peopleperson88]

I've setup a VPN server on each side of the firewall now how do I tell the DC, "When replicating AD information only use the VPN connection and not the unprotected Internet?"

I was thinking it has to deal with DNS and the SOA or SRV records? But not sure. I would rather have confirmation before trying anything.... Playing on Production server and not being sure it rather scary.

 

[AlexIT]

The servers both have non-routable addresses right?

There is no config change, the only way traffic can get from 192.168.1.10 to 192.168.10.10 is via VPN...

Alex