PIX 501 to Cisco 3000 series VPNC Active Directory replication

[cambo2k]

I have a PIX501 configured and users on site can access our network. However the DHCP scope on the local member server cannot be activated.
I can ping to the PDC in our AD structure. I have opened up TCP, IP and UDP traffic to go out with no restrictions.
Am I missing something to get the DHCP scope authorized?
Do I have to specify port 389 and/or 636 in some way?

Any ideas would be appreciated.

Thanks

 

[rhoang]

For active directory, all member servers that you want to run DHCP have to be authorized to the AD. Note, you need to be logged in as an Enterprise Admin to authorize.

Check this link out:

http://www.microsoft.com/technet/pr...elp/9f713d6c-d7e5-42a0-87f7-43dbf86a1730.mspx

Good Luck,
rich

 

[cambo2k]

I found out that for DSL modems you have to specifically tell it what ports are open to get AD taking to each other.
Depends on the type of DSL modem though, one service provider you had to go in and open the ports required for AD, the other was a managed DSL and they were wide open with no restrictions.

Thanks for getting back to me!

Cambo