Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have run dfsdiag /testdcs and I am getting the error:

Server has IP address with conflicting site associations

Now I think this is probably due to the fact that the server in question is linked to the others by a static VPN connection which gives it an ip address on the other network which is then confusing dfs.

Any ideas of what I have configured incorrectly?

Additional Info: Site1 has ip range 10.66.x.x and Site2 has 10.69.x.x but the server in site2 has an ip of assigned by the VPN connection so it is thought of being in the wrong site

share|improve this question
Would be easier to tell if you would provide us with your subnet-to-site definitions and some detail about your networking and VPN configuration. – the-wabbit May 25 '11 at 11:04
up vote 2 down vote accepted

It is generally a good idea to keep the IP addresses used by VPN connections to a completely separate subnet or range of IP addresses. This will make it a lot easier to understand the routing decisions taken by the various hosts involved in the traffic.

Most VPN connections use a small tunnel (i.e. a subnet of 4 IP addresses), consisting of the network address, the 2 clients and a broadcast address. In your example, this could be something like

Once you have that in place, you should be able to see (via traceroute or other means) where traffic is going and where it is dropped. That will then give you an idea of any missing route table entries, and should remove the confusion of dfs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.