up vote -4 down vote favorite
share [g+] share [fb]

Requirement:

I have 2NIC in my server(DC)

1st NIC - WAN(static ip)

2nd NIC - LAN(static for active directory users to join)

i need to share internet from 1st NIC to 2nd NIC

Clients should be able to access internet when they connect to domain controller(active directory)**

link|improve this question
Is the AD your Default Gateway? – Bart De Vos Oct 18 '11 at 6:20
3  
What is the reason to do so? Why not set it up in a more conservative way with a separate router? It just is not a good idea to put more functionality on domain controllers. – Posipiet Oct 18 '11 at 6:37
2  
You're using your domain controller as your Internet gateway? If you're worried that hackers on the internet are bored then you need to give them something that's actually a challenge, not just more of the same ol' 'too easy to bother with'. – DJ Pon3 Oct 18 '11 at 7:07
You're just inviting problems trying to do this. Buy yourself a small firewall for a few hundred $ and do it properly. You'll save yourself money in the long run. – Ian Oct 18 '11 at 14:31
10  
Stop. Back away from your Domain Controller. Hire someone that knows that they are doing. – MDMarra Oct 18 '11 at 20:04
show 2 more comments
feedback

migrated from stackoverflow.com Oct 18 '11 at 6:17

This question came from our site for professional and enthusiast programmers.

closed as not constructive by Ward, Shane Madden, MikeyB, Chris S♦, Holocryptic Oct 18 '11 at 20:14

This question is not a good fit to our Q&A format. We expect answers to generally involve facts, references, or specific expertise; this question will likely solicit opinion, debate, arguments, polling, or extended discussion. See the FAQ for guidance on how to improve it.

2 Answers

up vote 2 down vote accepted

You should not do that, because you shouldn't expose your Domain Controller directly to the Internet.

Though, you can do that but keep in mind the right management of the Firewall.

You need two network cards on your domain controller, one to the LAN and another one to the Internet.

You should install the RRAS role on that server (with this your server will work as a router) and in RRAS enable the feature called NAT. This is really simple and there is a lot of documentation on the web.

You should change the gateway of all your machines to be the LAN network interface card of the Domain Controller. If you have a DHCP server, make the change on it.

link|improve this answer
2  
+1 because RRAS is actually the way to do that; but it really shouldn't be done on a DC. – Massimo Oct 18 '11 at 20:06
yes its not secure... – achieverprince Oct 19 '11 at 6:16
feedback
up vote 5 down vote

NEVER MULTIHOME DOMAIN CONTROLLERS. It is not considered good practice. You should not do this especially if you are asking such elementary questions. The guy I replaced did this and I've had AD headaches because of this.

Use radius or a proxy to control internet access. Or a cheap router. Anything but this.

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.