Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Situation: Company A purchased Company B. Offices are 40 miles apart. There are about 10 employees in each office. We want to have everyone be able to access all network resources independent of location.

Company A - Windows 2008 Server domain controllers, Win XP, and Windows 7 workstations. Company B - Windows 2003 Server domain controllers, Win XP, and Windows 7 workstations.

Company A, has T1 connection to internet, and Cisco ASA 5505 firewall. Will add 2nd T1 line shortly. Company B, has 25x3Mbs connection to internet, and WatchGuard firewall.

Company A and B have different subnet addresses on their internal LAN.

How should this be done?

share|improve this question
up vote 8 down vote accepted

Make a VPN connection between the two networks (site-to-site link between the ASA and the Watchguard.)

Configure a two-way-trust between the domains - this will probably entail some DNS changes. Then, start assigning permissions appropriately.

That will link the two networks and allow them to share resource.

Longer-term, you may want to migrate everything out of one domain into the other, but a good easy start is a trust. You will also want to move all of their processes into your framework and tools - AV, software licensing, monitoring, backups, etc. Infrastructure processes like that are best to consolidate, not run with two different systems.

Which brings up a good point - It may be a good idea to first do an audit of the new network to make sure the AV is up-to-date and there is no malware on the machines, before you make the VPN link.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.