Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Subject: [ActiveDir] AD sites and subnet questions
Prev Next
You are not authorized to post a reply.

AuthorMessages
ClydeBurnsUser is Offline

Posts:4

04/04/2006 3:24 AM  
I am planning a move of our exchange servers and two domain controllers
out of our current single site to a new separate site. We had MS come in
and do a healthcheck on Exchange, and its one of their recommendations.
We don't have all the subnets in our network added into the current site
yet. Before I break out the netsh and AD cookbook scripts and go to the
lab I wanted to first see if there are simpler ways of doing this.

Question 1.
If I have say, 25 class C networks like 192.168.1.0/24 thru
192.168.25.0/24 in site 1. Can I put 192.168.0.0/16 under site 1 and it
work the same as explicitly defining the 25 separate subnets?

Question 2. The computers going to site 2 are part of a subnet in site 1
currently. Can I get away with adding individual computers to site 2
that are subset of a subnet defined in site 1?
Site 1 - 192.168.1.0/24
Site 2 - 192.168.1.10/32
192.168.1.11/32
192.168.1.12/32
192.168.1.13/32
Or do I need to move them into their own subnet for the separate site?
Thank you for any insight and/or recommendations you have.

Clyde Burns
Norton Healthcare

-----------------------------------------
This message is confidential, intended only for the named
recipient(s) and may contain information that is privileged or
exempt from disclosure under applicable law. Any patient health
information must be delivered immediately to intended recipient(s).
If you are not the intended recipient(s), you are notified that the
dissemination, distribution or copying of this message is strictly
prohibited. If you receive this message in error, or are not the
named recipient(s), please notify the sender at either the e-mail
address or telephone number above and discard this e-mail. Thank
you.

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
bdesmondUser is Offline

Posts:291

04/04/2006 4:10 AM  
> Question 1.
> If I have say, 25 class C networks like 192.168.1.0/24 thru
> 192.168.25.0/24 in site 1. Can I put 192.168.0.0/16 under site 1 and
it
> work the same as explicitly defining the 25 separate subnets?

Yes, however that includes more than just your 25 /24s. I'm sure your
network people have supernetted it in some fashion, because 25 /24s
isn't a supernet. 32 /24s starting at 192.168.0.0 is 192.168.0.0/19

> Question 2. The computers going to site 2 are part of a subnet in site
1
> currently. Can I get away with adding individual computers to site 2
> that are subset of a subnet defined in site 1?
> Site 1 - 192.168.1.0/24
> Site 2 - 192.168.1.10/32
> 192.168.1.11/32
> 192.168.1.12/32
> 192.168.1.13/32
> Or do I need to move them into their own subnet for the separate site?

Yes that will work fine

Thanks,
Brian Desmond
brian@xxxxxxxxxxxxxxxx

c - 312.731.3132



> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-
> owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Burns, Clyde R.
> Sent: Tuesday, April 04, 2006 11:07 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] AD sites and subnet questions
>
>
>
> I am planning a move of our exchange servers and two domain
controllers
> out of our current single site to a new separate site. We had MS come
in
> and do a healthcheck on Exchange, and its one of their
recommendations.
> We don't have all the subnets in our network added into the current
site
> yet. Before I break out the netsh and AD cookbook scripts and go to
the
> lab I wanted to first see if there are simpler ways of doing this.
>
> Question 1.
> If I have say, 25 class C networks like 192.168.1.0/24 thru
> 192.168.25.0/24 in site 1. Can I put 192.168.0.0/16 under site 1 and
it
> work the same as explicitly defining the 25 separate subnets?
>
> Question 2. The computers going to site 2 are part of a subnet in site
1
> currently. Can I get away with adding individual computers to site 2
> that are subset of a subnet defined in site 1?
> Site 1 - 192.168.1.0/24
> Site 2 - 192.168.1.10/32
> 192.168.1.11/32
> 192.168.1.12/32
> 192.168.1.13/32
> Or do I need to move them into their own subnet for the separate site?
>
>
> Thank you for any insight and/or recommendations you have.
>
> Clyde Burns
> Norton Healthcare
>
> -----------------------------------------
> This message is confidential, intended only for the named
> recipient(s) and may contain information that is privileged or
> exempt from disclosure under applicable law. Any patient health
> information must be delivered immediately to intended recipient(s).
> If you are not the intended recipient(s), you are notified that the
> dissemination, distribution or copying of this message is strictly
> prohibited. If you receive this message in error, or are not the
> named recipient(s), please notify the sender at either the e-mail
> address or telephone number above and discard this e-mail. Thank
> you.
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
wookleeUser is Offline

Posts:0

04/04/2006 4:40 AM  
Question 1: Yes, you can define one big one to replace the smaller ones,
but be aware that the bigger one is quite a bit bigger. In general, the
most specific subnet definition wins.

Question 2: Yes, you can even do individual IP addresses, but I'd avoid
it if possible because it quickly becomes an administrative nightmare.
I'd only do it for testing.

Wook

-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Burns, Clyde R.

Sent: Tuesday, April 04, 2006 10:07 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] AD sites and subnet questions

I am planning a move of our exchange servers and two domain controllers
out of our current single site to a new separate site. We had MS come in
and do a healthcheck on Exchange, and its one of their recommendations.
We don't have all the subnets in our network added into the current site
yet. Before I break out the netsh and AD cookbook scripts and go to the
lab I wanted to first see if there are simpler ways of doing this.

Question 1.
If I have say, 25 class C networks like 192.168.1.0/24 thru
192.168.25.0/24 in site 1. Can I put 192.168.0.0/16 under site 1 and it
work the same as explicitly defining the 25 separate subnets?

Question 2. The computers going to site 2 are part of a subnet in site 1
currently. Can I get away with adding individual computers to site 2
that are subset of a subnet defined in site 1?
Site 1 - 192.168.1.0/24
Site 2 - 192.168.1.10/32
192.168.1.11/32
192.168.1.12/32
192.168.1.13/32
Or do I need to move them into their own subnet for the separate site?
Thank you for any insight and/or recommendations you have.

Clyde Burns
Norton Healthcare

-----------------------------------------
This message is confidential, intended only for the named
recipient(s) and may contain information that is privileged or
exempt from disclosure under applicable law. Any patient health
information must be delivered immediately to intended recipient(s).
If you are not the intended recipient(s), you are notified that the
dissemination, distribution or copying of this message is strictly
prohibited. If you receive this message in error, or are not the
named recipient(s), please notify the sender at either the e-mail
address or telephone number above and discard this e-mail. Thank
you.

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
listmailUser is Offline

Posts:326

04/04/2006 8:34 AM  
1. Yes this is fine and often recommended. Best to keep as few subnets as
possible just for the simplicity of it all and ongoing maintenance.

2. You could either carve out a little portion of the subnet for these
machines or move them to another "clean" IP segment or even just configure
the machines directly to use the specific site that you want them to use. If
you set the value of

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\Sit
eName

to a specific site it will ignore the subnet/site topology for determining
the local machine's site. This can be messy/confusing especially if people
forget about it but I have found occasion to use it in a couple of
deployments where changing a machine's IP address was NOT an option but I
wanted the machines to be using a very specific set of GCs. Yes, the
application involved was Exchange. :)
joe

--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm


-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Burns, Clyde R.
Sent: Tuesday, April 04, 2006 11:07 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] AD sites and subnet questions

I am planning a move of our exchange servers and two domain controllers out
of our current single site to a new separate site. We had MS come in and do
a healthcheck on Exchange, and its one of their recommendations.
We don't have all the subnets in our network added into the current site
yet. Before I break out the netsh and AD cookbook scripts and go to the lab
I wanted to first see if there are simpler ways of doing this.

Question 1.
If I have say, 25 class C networks like 192.168.1.0/24 thru
192.168.25.0/24 in site 1. Can I put 192.168.0.0/16 under site 1 and it work
the same as explicitly defining the 25 separate subnets?

Question 2. The computers going to site 2 are part of a subnet in site 1
currently. Can I get away with adding individual computers to site 2 that
are subset of a subnet defined in site 1?
Site 1 - 192.168.1.0/24
Site 2 - 192.168.1.10/32
192.168.1.11/32
192.168.1.12/32
192.168.1.13/32
Or do I need to move them into their own subnet for the separate site?
Thank you for any insight and/or recommendations you have.

Clyde Burns
Norton Healthcare

-----------------------------------------
This message is confidential, intended only for the named
recipient(s) and may contain information that is privileged or exempt from
disclosure under applicable law. Any patient health information must be
delivered immediately to intended recipient(s).
If you are not the intended recipient(s), you are notified that the
dissemination, distribution or copying of this message is strictly
prohibited. If you receive this message in error, or are not the named
recipient(s), please notify the sender at either the e-mail address or
telephone number above and discard this e-mail. Thank you.

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] AD sites and subnet questions



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:arabic58
New TodayNew Today:0
New YesterdayNew Yesterday:1
User CountOverall:4213

People OnlinePeople Online:
VisitorsVisitors:73
MembersMembers:0
TotalTotal:73

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use