Hey,
So this might be kind of complicated - so far it's a bit over my head, but I know it's absolutely possible.
I'm trying to set up routing between two subnets with an AD trust between the two of them, but let's put the AD/IPA trust aside for a minute, because none of it will work without well-functioning network config
Here's the big picture:
I'd like 2 subnets, 192.168.1.0/24 for AD domain, 192.168.2.0/24 for IPA domain. The two will be different forests + domains (or IPA could be a subdomain, either way).
I'd like all VMs on both 192.168.1.0/24 and 192.168.2.0/24 to be able to reach the outside internet, and each other, without any restrictions.
Gateway/firewall is 192.168.1.1, 192.168.1.0/24 exists and is operational, 192.168.2.0/24 is what I'm trying to set up.
How do I set up the routing for:
1) AD Domain network w/ Windows 2019 DNS servers authoritative at 192.168.1.0/24
2) FreeIPA network w/ Fedora 33 DNS server (in FreeIPA) authoritative at 192.168.2.0/24
I know I need to set up conditional forwarding to point at each other's subnet, but how should I do just the basic network setup for each server?
E.g. do I need Windows to see 192.168.2.2 (FreeIPA server) as a DNS server in its ipv4 network settings?
Do I need Fedora to see 192.168.1.2 (AD DNS server) as a DNS server in its ipv4 network settings?
Do I need masquerade or anything like that to accomplish these goals? If so, what's the Windows equivalent?
Do I need Fedora at 192.168.2.2 (FreeIPA server) to see 192.168.1.1 as a gateway for internet traffic, or could/should all internet traffic go through 192.168.1.2 (AD DC DNS) before to/from gateway?
Little stuff like this has been tripping me up. If anyone could help out, I'd really appreciate it!
Edit: Just thought of a couple other things:
Do I need to set up something on my switch to be able to transmit two subnets? BTW it's a powerconnect 7048P, it has VLAN and layer 3 capabilities.
Should I set up another vNIC on the Windows (192.168.1.2/24) AD DNS VM in order to communicate with 192.168.2.0/24 (FreeIPA network)?
In the same vein as the last question, should I set up another VM network for the Linux VMs (192.168.2.0/24), or is that not necessary?
Thanks
So this might be kind of complicated - so far it's a bit over my head, but I know it's absolutely possible.
I'm trying to set up routing between two subnets with an AD trust between the two of them, but let's put the AD/IPA trust aside for a minute, because none of it will work without well-functioning network config
Here's the big picture:
I'd like 2 subnets, 192.168.1.0/24 for AD domain, 192.168.2.0/24 for IPA domain. The two will be different forests + domains (or IPA could be a subdomain, either way).
I'd like all VMs on both 192.168.1.0/24 and 192.168.2.0/24 to be able to reach the outside internet, and each other, without any restrictions.
Gateway/firewall is 192.168.1.1, 192.168.1.0/24 exists and is operational, 192.168.2.0/24 is what I'm trying to set up.
How do I set up the routing for:
1) AD Domain network w/ Windows 2019 DNS servers authoritative at 192.168.1.0/24
2) FreeIPA network w/ Fedora 33 DNS server (in FreeIPA) authoritative at 192.168.2.0/24
I know I need to set up conditional forwarding to point at each other's subnet, but how should I do just the basic network setup for each server?
E.g. do I need Windows to see 192.168.2.2 (FreeIPA server) as a DNS server in its ipv4 network settings?
Do I need Fedora to see 192.168.1.2 (AD DNS server) as a DNS server in its ipv4 network settings?
Do I need masquerade or anything like that to accomplish these goals? If so, what's the Windows equivalent?
Do I need Fedora at 192.168.2.2 (FreeIPA server) to see 192.168.1.1 as a gateway for internet traffic, or could/should all internet traffic go through 192.168.1.2 (AD DC DNS) before to/from gateway?
Little stuff like this has been tripping me up. If anyone could help out, I'd really appreciate it!
Edit: Just thought of a couple other things:
Do I need to set up something on my switch to be able to transmit two subnets? BTW it's a powerconnect 7048P, it has VLAN and layer 3 capabilities.
Should I set up another vNIC on the Windows (192.168.1.2/24) AD DNS VM in order to communicate with 192.168.2.0/24 (FreeIPA network)?
In the same vein as the last question, should I set up another VM network for the Linux VMs (192.168.2.0/24), or is that not necessary?
Thanks
Last edited: