Ports need to be opend for AD Replication

  • Thread starter Thread starter Chai
  • Start date Start date
C

Chai

Hi there,

I found out the problems is cause by the firewall block
the traffic between the 2 DC when trying to perform AD
replication.

The problems now is what is the minimum ports I need to
open in order for AD replication?

I try open 389, 88, 3268, 464, 135 (its 135 necessary?).
When I try to perform replication - error message "Not
enought port opened for endpoint mapping".

If I open all ports then no problems - but no secure.

Any ideas?

Thanks
 
Take a look at http://www.microsoft.com/technet/ittasks/tasks/adrepfir.asp

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Hi Tim,

I perform the steps similar like microsoft say but it seem
like don't work - I don't know why but when I use netstat
to check the connection - I only see the DC try to make a
135 connection to another DC but only SYN_SENT only.

I also cannot ping my server - even I open all the port?

I hear that many ISP block the ICMP and port 135 cause by
the virus - it is true??

Thanks
 
Back
Top