Bit of a newb when it comes to this but I'm giving it a go and, so far, things work but I hope I'm doing it in a correct manner and a couple of little hiccups...
HQ has a SBS2011E DC (DC1) that provides DHCP and DNS to a small network (IP: 192.168.10.11). Internet modem/router is gateway (192.168.10.1). DHCP is configured in 80/20 split-scope configuration (192.168.10.100 - 192.168.10.200).
New office has similar set up. Windows Server 2012 Standard (DC2) that also provides DHCP and DNS (DC2 IP: 192.168.10.12). DC2 - at the moment - is located at HQ whilst it is being configured. It has been domain joined and DCPromo'd so it is replicating and seems to work so far. I have run the DHCP split-scope wizard on DC1 for an 80/20 split. These settings have replicated onto DC2 so it is aware of what IPs it can and cannot serve. Internet modem/router is gateway - can I set this to a similar static IP as the HQ gateway, e.g. 192.168.10.2?
An issue I have run into is that when I restart DC1 it complains that an existing DHCP server is on the network and the DHCP Server service on DC1 stops. I have read that with SBS in particular that it does not like other DHCP servers to be on the same subnet, even though I have configured a split-scope? It is fully aware that the other DHCP server won't serve addresses in the range it offers because the wizard ran successfully?! As a temporary fix for this I found a registry entry (
DisableRogueDetection) that has been applied to DC1 - but I do not want to rely on this because it is not a "natural" solution.
Why a split-scope? Why not? Our intention is to move DC2 to our remote site where a hardware VPN will join the two networks. I would like for the two servers to be able to help the entire network for file shares, DHCP and DNS. As a result of this I would like for DHCP requests to traverse the VPN (just in case any of the servers are down). The split-scope DHCP, I have read in many locations, should allow for precisely what I am intending? I could then have the entire network use a logical range.
If the split-scope is going to cause problems then I can revert to different ranges for the two servers.
Can I have the hardware VPN use end-point IPs that are within my subnet range? The device is a Draytek all-in-one router/VPN etc. so it has been configured as the gateway and I can get to the web interface using 192.168.10.1 so I would like to be able to get to the other end-point device (another Draytek if I can) by a similar IP (such as 192.168.10.2)...
My "idea" of a network configuration:
Edit 1: I guess my questions are:
- If I want to use the two DHCP servers serve a split-scope then am I safe to continue using the SBS 2011 Essentials registry hack to make it ignore rogue DHCP servers on the network - because it DOES have two? The routers would be configured to allow DHCP requests across the VPN so if one DHCP server is down, the other can still respond.
- Would a network configuration as to my picture work? I am trying to get advice before I turn up at the remote office for it to not work!
- Can I set my VPN routers to have the IP's as per my picture so that they can be part of the network and managed using addresses within a logical range? Obviously I'm not asking how to configure them, I know this; but the IPs they would be given within the tunnel is what I'm asking.