Nat???

[JUNG2]

Hello and good day! I have computer with 2003 server. I'm using it as my domain controller. This server also has two network card. One network card is connected to computers that are domain clients. The other network card connects to internet access (winproxy) and other computers that are not member of the domain. Basically I have two network segment seperated by the domain controller. Let say domain clients is segment "A" and the other side is segment "B". I enabled NAT so my segment "A" can access the internet and computers that belong to segment "B". With NATing "A" can see "B" but not vice versa. How can I configure my domain so that "A" can see "B" and "B" can see "A"?

Note:My IP looks something Like this Domain Clients = A.A.A.X
Winproxy Clients = A.A.B.X
Both subnet are 255.255.255.0

Your help is greatly appreciated
Thanks

[macko72]

http://www.windowsnetworking.com/art...iguration.html

How to configure Windows 2000 or 2003 using NAT to share Internet access and restrict user logon duration?

You configure NAT by enabling Routing and Remote Access Services and then configuring the NAT service.

Open the Administrative Tools menu and click Routing and Remote Access (RRAS).

If you have not already enabled RRAS, click OK to do so.

If this is the first time enabling this service, you can use the wizard to configure NAT, otherwise, in the Routing and Remote console, expand the server object, and then expand IP Routing in the left pane.

Right-click General, and then click New Routing Protocol.

Click to select the NAT/Basic Firewall check box, and then click OK.

Right-click NAT/Basic Firewall in the left pane, and then click New Interface.

Click the interface that represents your internal network interface, and then click OK.

In the Network Address Translation properties, click Private interface connected to private network, and then click OK.

Right-click NAT/Basic Firewall and then click New Interface.

Click the interface that represents your external network interface, and then click OK.

In Network Address Translation properties, click Public interface connected to the Internet.

Click to select the Enable NAT on this interface check box, and then click OK.
To configure clients to use this service, configure their default gateway to be the internal network interface on the RRAS server. More instructions can be found at: http://support.microsoft.com/default...b;en-us;324264

[JUNG2]

Macko thank you for the quick reply. My NAT is already working. My problem is that the computer on segment "A" can see segment "B" but segment "B" can't see segment "A" . How can I configure my server to let segment "B" see segment "A" thank you

[macko72]

Well I've left you those links to check your settings in client and server it is possible that configuration is not in order but still it's funcional: http://technet2.microsoft.com/Window....mspx?mfr=true

http://www.chicagotech.net/nat.htm

[JUNG2]

Macko ones I do this will I be able to Ping that computer's IP? Thanks

[macko72]

Well as far as it goes you should be able to ping them !!!