mueller at tropenklinik.de
Mon Nov 2 09:37:06 UTC 2020
The best and the easiest way. Just use OpenVpn.
No need for a second DC if all remote pcs start the opnvpn client on startup.
On the DC side run the OpenVpn -Server or use "Zero-Shell".
EDV Daniel Müller
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Von: Sven Schwedas via samba [mailto:samba at lists.samba.org]
Gesendet: Montag, 2. November 2020 10:26
An: samba at lists.samba.org
Betreff: Re: [Samba] VPN
On 01.11.20 18:48, Philip Offermans via samba wrote:
> I have a samba server running as an active domaincontroller. I want people in an other office building to use the same samba server. What is the best way to do this? Use a second domain controller. Vpn to first domain controller. (Using an Mikrotik router). And how can you configure windows to use the vpn at startup?
If you have the resources for it, a secondary DC would be preferable:
Redundancy in case the link between the two offices is unstable, and better performance even if it's stable.
You will still need a VPN to connect the two DCs, however. A router-level VPN link ought to suffice, and either way you wouldn't need to set up anything on the individual machines, as long as the router is their default gateway. If it isn't, they need a route to it (usually pushed out via DHCP).
Windows itself creating a VPN connection pre-login is more useful when you have people scattered around in home office and need them to access the DCs.
More information about the samba