trannghia

Thanks @Davit2005. It has done . Last time, i config incorrect ip route on my firewall that why i cannot go to the internet .

Hi All, Now, I'm using the sw HP 2610-48 and have created 3 vlan on it. - Default VLAN IP: 192.168.30.10 MS: 255.255.255.0 - VLAN 10 IP: 192.168.10.10 SM: 255.255.255.0 - VLAN 20 IP: 192.168.20.10 SM: 255.255.255.0 - DHCP Server IP: 192.168.30.7, created 3 scopes for 3 vlans and all the computers on each the vlan can be get the IP from the DHCP server. - Firewall IP: 192.168.30.2 SM: 255.255.255.0 The problems: I have inter-vlan routing turned on, each vlan is able to ping each other. But, only the devices connected to the default-vlan is able to ping the firewall and get onto the internet, VLAN 10, 20 cannot ping to the gateway and go to the internet. I thinks the problems from my routing table. But, i don't know how to fix it. Please help. Switch configuration: ; J9088A Configuration Editor; Created on release #R.11.112 hostname "VLAN" ip default-gateway 192.168.30.2 ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 25-52 ip address 192.168.30.10 255.255.255.0 no untagged 1-24 exit vlan 10 name "VLAN_10" untagged 1-12 ip address 192.168.10.10 255.255.255.0 ip helper-address 192.168.30.7 exit vlan 20 name "VLAN_20" untagged 13-24 ip address 192.168.20.10 255.255.255.0 ip helper-address 192.168.30.7 exit ip route 0.0.0.0 0.0.0.0 192.168.30.2

Hi All, I have just fixed the problems:). 1/ Please user the following steps. https://jorgequestforknowledge.wordpress.com/2010/08/12/restoring-the-sysvol-non-authoritatively-when-either-using-ntfrs-or-dfs-r-part-2/ 1.1 (Primary DC) Start the Registry Editor Navigate to "HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" Double-click on "BurFlags" Assign it a value of D4 (hex) or 212 (dec) Stop the NTFRS Service Start the NTFRS Service 1.2 (Additional DC) Start the Registry Editor Navigate to "HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup" Double-click on "BurFlags" Assign it a value of D2 (hex) or 210 (dec) Stop the NTFRS Service Start the NTFRS Service 2/ To share SYSVOL Folder Change the regedit. https://support.microsoft.com/en-us/kb/947022 Start the Registry Editor change the sysvolready to 1. Thanks.

Hi All, Sorry, I was on-leave last week, I found the sysvol and Netlogon folders does not shared, After read and do following this article https://support.microsoft.com/en-us/kb/316790 the sysvol folder is sharing. But, Unfortunately that the sysvol folder is empty and Group policy's not yet replication. I check windows Events and found an error below: - NTFRS - 13508 - Group Policy - 1058 Thanks.

I just run the command and below is the results. - Pri DC: Directory Server Diagnosis Performing initial setup: * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\SFDCSVR Starting test: Connectivity ......................... SFDCSVR passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\SFDCSVR Starting test: SysVolCheck ......................... SFDCSVR passed test SysVolCheck Running partition tests on : ForestDnsZones Running partition tests on : DomainDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on : abc Running enterprise tests on : abc.com - Add DC Directory Server Diagnosis Performing initial setup: * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\SFDCSVR2 Starting test: Connectivity ......................... SFDCSVR2 passed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\SFDCSVR2 Starting test: SysVolCheck ......................... SFDCSVR2 passed test SysVolCheck Running partition tests on : ForestDnsZones Running partition tests on : DomainDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on : abc Running enterprise tests on : abc.com Directory Server Diagnosis Performing initial setup: * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: Default-First-Site-Name\SFDCSVR2 Starting test: Connectivity The host ade287e1-78eb-429d-b101-57896e663f24._msdcs.abc.com could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc. ......................... SFDCSVR2 failed test Connectivity Doing primary tests Testing server: Default-First-Site-Name\SFDCSVR2 Running partition tests on : ForestDnsZones Running partition tests on : DomainDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on : abc Running enterprise tests on : abc.com and i'm going to add domain (SFDCSVR2) i not found the sysvol shared folder http://s20.postimg.org/5y9z6vhbh/image.jpg Pls advice. Thanks

Dear All, http://s20.postimg.org/7ifb59ppp/Dia.jpg Currently, we are using windows server 2008 std x64 to build a Domain Controller. To prevent failure of the primary domain I have build an addition domain (using the Windows Server 2008 Std) During the build process does not encounter errors (when I'm creating users, DNS, OU. 2 DC can synchronize). But but after setting up completed about 1 week. I try unplugging the network cable on Primary Domain and try to open the additional domain. I saw an errors the additional domain cannot open the active directory . http://s20.postimg.org/vjhlszf59/Loi.jpghttp://s20.postimg.org/4aats83fx/loi2.jpg But when i pug the cable to Primary domain then additional domain is back to work normally . I do not know why? Please help me to fix it. Thanks for your advice.

Because my HP SW can be routing and I have changed the IP gateway on my DHCP Server to: 30.40. Now, everything are working fine. Thanks for your supports.

Hi @ass17 you mean, Now i must have to config the routers for my VLAN2 (on the SW) or on Firewall. Please advice. Thanks.

- The gateway set on the dhcp server is: 192.168.30.1 - Your mean i must set the gateway for this vlan right ?

Dear All, Thanks for your help. - When I set the IP static, (192.168.100.10 sm: 255.255.255.0, GW: 192.168.100.100) I cannot ping to the server although all windows firewall and antivirus are disabled. - I have try to disabled DHCP Snooping but nothing to change. I don't know what happened ?Please help me. Thanks.

Dear All, I have a diagram below. http://s20.postimg.org/j3lreg771/vlan2.jpg On Windows Server i have created 2 DHCP scope: - Scope1: 192.168.30.x/24 (normal vlan) - Scope2: 192.168.100.x/24 (vlan2) I'm using SW HP 6600-24 core sw and have created a new vlan named:vlan 100 (untaged: 4,11-12), but when i connected the cable form port 4 to the client still won't automatically get a IP (192.168.100.x) form DHCP server. I'm sure I've missed something/set something wrong but can't figure out what! http://awscdn.cdngeek.net/images/smilies/confused.png Any helps are welcome. HP 6600 config ip default-gateway 192.168.30.1 ip routing vlan 1 name "DEFAULT_VLAN" untagged 1-3,5-10,13-23,Trk1 ip address 192.168.30.40 255.255.254.0 no untagged 4,11-12 exit vlan 100 name "VLAN100" untagged 4,11-12 ip helper-address 192.168.30.5 ip address 192.168.100.100 255.255.255.0 exit fault-finder bad-driver sensitivity high gvrp dhcp-snooping dhcp-snooping authorized-server 192.168.30.5 dhcp-snooping authorized-server 192.168.30.6 dhcp-snooping vlan 1