Limited RPC replication over Firewalls

Norton · Nov 25, 2003

Hi All
Can anyone confirm the following for me please.
You are supposed to be able to set up replication with
limited RPC over firewalls.
From the testing we have done in house, this solution
works but only after the intial replication is allowed to
occur with a wide open firewall config. Once the first
replication has occured the firewall can be closed down
and the ports limited via the registry as per the technet
article "Active Directory Replication Over Firewalls".

Has anyone else done this successfully without the need to
open up firewalls for the first replication???

Cary Shultz [A.D. MVP] · Nov 25, 2003

Norton,

I think that most people would create a Site-to-Site VPN ( aka:
Firewall-to-Firewall VPN ) to do this. I am assuming that you are referring
to the following article:
http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp

I have worked in several multiple site environments but have always had a
dedicated T1 between Sites.

Cary

Guest · Nov 25, 2003

This is indeed the article I was talking about.
Unfortunately the ipsec route is not an option. Not
because of technical restraints or hardware but politics.

Limited RPC replication over Firewalls

Norton

Cary Shultz [A.D. MVP]

Guest