robert l ms-mvp

can you by using ip? For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!


Each office has got 1 dc and an exchange server. I can ping from London all
servers in Amsterdam and Stockholm and they can ping all servers in London.

The problem that I have is that the Stockholm Dc cannot ping anything in
Amsterdam and nothing in Amsterdam can ping the Stockholm DC. The problem is
only with the DC as I can ping the Stockholm exchange server from Amsterdam
and it can ping anything in Amsterdam. Obviously this is causing a problem
with replication between the 2 sites. I have noticed in DNS that the
stockholm server does not have a _kerberos or _kpasswd srv record whereas al
the other DC's do. I have tried to Reset the machine account password, and
then obtain a new Kerberos ticket as per the kb article but to no avail.

Any ideas greatly appreciated

peter meehanr

Hi Robert

I can't ping by ip address to this server from the Amsterdam site but can
from London

phillip windell

Well then we need more information about the routing scheme and how you
designed it,...otherwise we are just chasing our tail and playing a
"guessing game".

--

Phillip Windell [MCP, MVP, CCNA]
http://www.wandtv.com

and

peter meehanr

Hi Phillip

All 3 sites are linked by cisco pix site to site vpn's. I have set up site
links through ad sites and services. Amstedam and Stockholm have 1 2000 dc
each London has 1 2000 dc and 1 2003 dc. The only thing that might have had
an impact was that the Amsterdam site dc had to be powered down on Friday
night and brought back on line Sunday afternoon.

As stated previously the issue is just that the DC in Stockholm cannot ping
or be ping'd by anything in Amsterdam all other connectivity works fine. The
Stockholm mail server can ping and be ping'd by everything in Amsterdam.
London can connect with everything in all sites and all sites can connect
with London.

peter meehanr

Basically

Stockholm site has no problem with connectivity to London and LOndon has no
problem with connectivity to Stockholm. Amsterdam has no problem with London
and London has no problem with Amsterdam. Amsterdam can connect and ping
every pc and the exchange server in Stockholm and every pc and the exchange
server in Stockholm can connect and ping everything in Amsterdam. The problem
is no PC or server can ping the stockholm DC from Amsterdam and the Stockholm
DC cannot ping anything in Amsterdam. The Stockholm DC has no problem pinging
or being ping'd by anything in London and is functioning totally normally
within it's own site and with connection and replication to London.

phillip windell

Ok, so let's leave London out of the conversation, it will just confuse
things.

The Stockholm DC does not ping anything in Amsterdam, and the problem is
"one-way".

Can anything else in the Stockholm Site ping anything in London? I need to
know if this is machine specific or LAN specific.
I also need to know everytime you attempt a ping (failed or not) exactly how
you pinged,...there are three ways, IP#, Netbios Name, and FQDN. They each
depend on different things, it is important to know which way it was done.

Other things to consider,....forget "ping". Are there any "services" on the
Amsterdam site to connect to (a website, ftp site, etc.?). Try connecting
to them. I am looking to see it this is a Layer4, "protocol specific",
problem such as ICMP doesn't work but TCP does but UDP doesn't, or certain
ports do and some don't,...that type of stuff.

--

Phillip Windell [MCP, MVP, CCNA]
http://www.wandtv.com

phillip windell

Ok. I don't have any suggestions at the moment but hopefully this clarified
the problem enough that others reading it may have ideas.

--

Phillip Windell [MCP, MVP, CCNA]
http://www.wandtv.com