Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have two VLANs:

  • uservlan
  • servervlan (where DC Server 2003, webserver exists).

I'm using Active Directory. Since the DC is on a different network (VLAN), how do people from uservlan join the Active Directory?

How do I implement this type of design?

share|improve this question

closed as off topic by ChrisF, Dave Rook, Indrek, 8088, BBlake Sep 20 '12 at 18:26

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

2  
Can I ask why your server is on a different vlan to your users? Separate VLANs would typically be used to separate a guest network or VOIP from your domain but the server and workstations would normally be on the same. –  Miles Hayler Sep 20 '12 at 9:54
    
If this is a network of more than a few users, which it probably is if there's an AD Domain Controller, then this is a perfectly good design. Network segmentation is one of the most basic levels of security controls. –  ZnArK Sep 20 '12 at 13:50
add comment

1 Answer

if you have a Layer 3 switch you can route the traffic between vlans by just using the switch, if you don't then you do it by using a router, either on some server/computer (you can use Windows Server with Routing and Remote Access service) or some device like Cisco router or similar, the router will have to have three network interfaces (one for one vlan, one for other and one for Internet link). This would be the simplest solution.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.