AD Replication Error

[Merlyn]

I trying to set a new child domain over a WAN and it will
not replicate the domain schema container with an error "
The Directory Service consistency checker has determined
that either (a) there is not enough physical connectivity
published via the Active Directory Sites and Services
Manager to create a spanning tree connecting all the
sites containing the Partition
CN=Configuration,DC=clarkaust,DC=com,DC=au, or (b)
replication cannot be performed with one or more critical
servers in order for changes to propagate across all
sites (most often due to the servers being unreachable)".
The Server are reachable from both sides and both sides
can resolve each others name so I figure it's the
physical connectivivty in Site and Services. Can some
body tell me how to increase this ?

Thanks in Advance
Merlyn

 

[Cary Shultz [A.D. MVP]]

Merlyn,

Have you possibly set up a Site-to-Site VPN between the two locations? This
will really help. If not, do you have the appropriate ports open? Check
out the following link:
http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp

Also, it is generally recommended that when you add a child domain that you
delegate DNS. Have you done this? Here is the link:

http://support.microsoft.com/default.aspx?scid=kb;en-us;255248

HTH,

Cary