+ Post New Thread
Results 1 to 8 of 8
Windows Server 2000/2003 Thread, Merged School and Office networks. What now? in Technical; Hi, we've just removed access list from Synetrix router so that School range 10.74.140.* can access to Office range 10.74.138.* ...
  1. #1

    Join Date
    Jul 2010
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Merged School and Office networks. What now?

    Hi, we've just removed access list from Synetrix router so that
    School range 10.74.140.* can access to Office range 10.74.138.* and vice versa

    Subnetmask on both is 255.255.255.0 and domain controller sits on school network at 10.74.140.10 and Dns is on same ip. AD machine is Win 2003

    When i ping ips I can reach to one range from other but dns doesn't resolve local names.

    DHCP adress pool on Ad set to 10.74.140.20-250.

    I want to join 10 computers on Office to domain with their current static ips at 10.74.138.* range as 10.74.140.* getting crowded every day as we add more PC's to network.

    What are my options? How can i set Ad to provide and resolve ips for both ranges?

    Thanks
    Last edited by POWict; 20th July 2010 at 03:43 PM.

  2. #2

    Join Date
    Jul 2010
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    anyone?

  3. #3

    Hightower's Avatar
    Join Date
    Jun 2008
    Location
    Cloud 9
    Posts
    4,920
    Thank Post
    494
    Thanked 690 Times in 444 Posts
    Rep Power
    241
    To me your two networks shouldn't be able to talk to each other. If you want this to happen it would seem (but don't take this as golden) that you either need to bring one network into the other range, or even change your subnet to extend your network range.

  4. #4

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    783
    Thank Post
    1
    Thanked 33 Times in 31 Posts
    Rep Power
    24
    Quote Originally Posted by Hightower View Post
    To me your two networks shouldn't be able to talk to each other. If you want this to happen it would seem (but don't take this as golden) that you either need to bring one network into the other range, or even change your subnet to extend your network range.
    Agree - a 21 bit Subnet Mask of 255.255.248.0 will extend your IP range from 10.74.136.1 to 10.74.143.254.

  5. #5

    Join Date
    Jul 2010
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for replies.
    When they setup school network (i have no info who) they specifies a very large subnet it is 255.0.0.0 and after some test i noticed that i can resolve names that belong to 10.74.140.* from 10.74.138.* range by putting domain name at the end, so ict-00 wouldn't resolve but ict-00.prince.local resolves fine. So, i assume joining office pcs to AD with static ip at 10.74.138.* with DNS server as Domain's DNS server would solve the problem.


    What would you advice?
    just join them to domain with static ips at 10.74.138.*? ( filtering policy less agressive on this range for office)
    delete current scope and re create it with small subnet?
    move office pc's to 10.74.140.* and leave 10.74.138.* empty?

  6. #6
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107
    You could have another scope in DHCP for your office range with the appropriate settings but your router would need to pass the DHCP/BOOTP between the router interfaces. This is usually the IP help parameter in the vlan settings.

  7. #7

    Join Date
    Jul 2010
    Posts
    5
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks, unfortunatelly i don't have access to router. It is provided by synetrix and they don;t allow us to access it. I think I'll have to leave 138 range empty for now

  8. #8

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    783
    Thank Post
    1
    Thanked 33 Times in 31 Posts
    Rep Power
    24
    Yeah I would bring everything into the 138 range. If you are confident that your security policies are sound there should be no other reason for the second range.

SHARE:
+ Post New Thread

Similar Threads

  1. Music on school networks
    By mattstevenson2005 in forum General Chat
    Replies: 16
    Last Post: 28th April 2011, 02:55 PM
  2. Office 2007 at home, Office 2003 at school
    By kennysarmy in forum Windows
    Replies: 25
    Last Post: 13th January 2009, 01:31 PM
  3. Replies: 21
    Last Post: 2nd October 2008, 08:51 AM
  4. Shared areas on school networks
    By ranj in forum Windows
    Replies: 13
    Last Post: 10th November 2006, 08:03 PM
  5. School networks and aid to Africa. A comparison.
    By Dos_Box in forum General Chat
    Replies: 14
    Last Post: 5th July 2005, 11:36 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •