Добавить комп в домен AD

[anshubnt]

Добрый день! Не можем добавить комп из удаленного офиса в домен. Удаленная машина имеет 192.168.8.2.
DC 192.168.1.1 с нее по IP доступен. VPN настроен с помощью двух UDM.

С удаленной машины 192.168.8.2:

PS C:\Windows\system32> tracert 192.168.1.1

Tracing route to 192.168.1.1
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  unifi [192.168.8.1]
  2    31 ms    31 ms    32 ms  192.168.9.8
  3    32 ms    31 ms    32 ms  192.168.1.1
Trace complete.

Starting portqry.exe -n 192.168.1.1 -e 53 -p UDP …
Querying target system called:
192.168.1.1
Attempting to resolve IP address to a name…
Failed to resolve IP address to name
querying…
UDP port 53 (domain service): LISTENING or FILTERED
Sending DNS query to UDP port 53…
UDP port 53 is LISTENING
portqry.exe -n 192.168.1.1 -e 53 -p UDP exits with return code 0x00000000.

PING по IP туда и обратно проходит, но по имени хоста и по имени домена domain.lan нет:

PS C:\Windows\system32>ping domain.lan
Ping request could not find host domain.lan. Please check the name and try again.
PS C:\Windows\system32> nslookup domain.lan
Server: UnKnown
Address: 192.168.1.1

*** UnKnown can't find domain.lan: Non-existent domain
PS C:\Windows\system32> test-netconnection 192.168.1.1 -port 53

ComputerName : 192.168.1.1
RemoteAddress : 192.168.1.1
RemotePort : 53
InterfaceAlias : Ethernet
SourceAddress : 192.168.8.2
TcpTestSucceeded : True

 

[anshubnt]

https://community.ui.com/questions/Site-to-Site-IPSEC-VPN-VLAN-Traffic-over-VPN-DNS-Issue/edbf90c8-c655-48d0-b8e2-e83b736fd0b7

UDM Pro Site To Site VPN with Domain Issues

I have 2 UDM Pro firewalls setup with a IPsec site to site VPN, the settings are the same for both VPNs (obviously the destination IPs are reversed for each unit) I can ping traffic with IP addresses

serverfault.com

 

[fAntom]

Проблема решена?