adding a second subnet to our existing domain.

D

Domoc71

New Member
Joined
Jul 3, 2024
Messages
14
Our domain is running out of ip addresses, currently the ip address range is 192.168.1.0/24
I want to add 192.168.2.0/24 to this domain.

As far as i can tell, i have configured the router to route between the 2 subnets and added the relay agent.
So as far as i know that's all i need on the router side (we are using a cisco router/firewall)

What do i need to do to Active directory/Domain controller to make it recognize the new subnet.

I have read that i just need to go into

Active directory Sites and Services -> Click on subnets -> right click on Subnets -> click on new subnet -> enter my new subnet -> click on Default-First-Site-Name

and i am all done

What do i need to do to the DNS to server the resolved the ip addresses

i believe i just need to add the new scope to the DHCP server.

Please could someone assist me in these final stages.

Thanks
 
Solution
The port to the domain controller would need to be a trunk vs an access port, then you would allow it to trunk all your vlans. Based on the vlan tagging the DHCP server would know which scope to issue addresses from
Sort by date Sort by votes
Are you using vlans on your routing and switching? This is usually what you associate to the DHCP scopes if you are using Windows DHCP
 
Upvote 0 Downvote
Hi,
thanks for the reply. We only have 1 vlan which is the primary subnet 192.168.1.0.

i was going to run the second subnet over the same vlan because we dont have vlan routing. Also that would mean changing many switches and breaking up the network.
Our network is very old and is basically a star network with the cisco router/firewall hanging off 1 port on the main switch and running off a single port on itself.

I could break it up but due to the expansion of the network from what was a windows XP network with a handful of machines on it was never planned for the growth it got.
We had to install mini switches pretty much at each desk to allow ip phones as well as pc network access. and everything is configured for vlan1 (data) and vlan 20 (ip phone).
the building is a factory so running new cabling is not an option.
 
Upvote 0 Downvote
also due to us still using server 2003 for our production ERP we have had to use static ip addresses for about 70% of the network pc's and printers as we had difficulties after moving to windows 7 and since to windows 10 & 11
 
Upvote 0 Downvote
Well I do recommend going to a different vlan. Having huge flat networks is asking for trouble, but you could change your subnet to be 192.168.0.0/23, but you would want to move your gateway out of the DHCP scope.
This would be 192.168.0.0 - 192.168.1.255
 
Upvote 0 Downvote
we have about 100 static machines and 47 switches on the 192.168.1.0 network i guess we would have to setup an exclusion for that.
If we went to vlan, that would mean changing the vlan ports on some of our switches so they took advantage of the new subnet? we currently have 47 switches, so i would have to pick some and change them to the new vlan?
 
Upvote 0 Downvote
also that would mean running a second port to the firewall router to separate the vlan traffic, we have a cisco firepower 1010 router/firewall
 
Upvote 0 Downvote
running a second vlan i would add the new addressing scheme to that vlan?

when you say earlier about expanding the subnet cidr to 192.168.0.0 can i still leave my router/firewall at the same address but exclude it in the exclusion range of the dhcp scope what would that involve with the domain controller is there would that would need to be done there apart from changing the servers ip address, also how would this affect our server 2003 machines?
 
Upvote 0 Downvote
Either way you go there's going to be work. I would move away from static assignments and make them DHCP reservations. With reservations the IPs will still be static, but any other info like GW and DNS will update as DHCP is updated. The issue you will run into with moving to DHCP reservations is you won't get the same addresses, so if you have hard coded configs for IPs you also want to change those to DNS names.
 
Upvote 0 Downvote
Many...
  • Security risks with lack of segmentation
  • Degraded performance
  • Broadcast storms
  • They don't scale well
  • Potential compliance issues (if you're required to meet any compliance frameworks)
  • Lack of control
  • Difficult to troubleshoot
  • STP issues
 
Upvote 0 Downvote
I am not sure we can add a new vlan. We have netgear switches and a cisco router/firewall.
I dont know if they can work together on the new vlan

I have also been recommended to just add a new scope. would this solve my problem, or is the vlan route still the best?
 
Upvote 0 Downvote
hi last question

our switches are managed netgear, but our router/firewall is a cisco firepower.

Would both of these be able to work together with a new vlan. We already have an ip phone system running on a separate vlan so would a new data vlan work the same? .
i believe i would have to configure a second port on the router/firewall to accept the new vlan. and provide internet access.
 
Upvote 0 Downvote
so in the routing of the vlans, i can use the relay agents to utilize my dhcp server and still be able to access my domain controller?
i would configure it as vlan1 (current data vlan) and vlan2 for the new data vlan.
 
Upvote 0 Downvote
The port to the domain controller would need to be a trunk vs an access port, then you would allow it to trunk all your vlans. Based on the vlan tagging the DHCP server would know which scope to issue addresses from
 
Upvote 0 Downvote
Solution
You must log in or register to reply here.

Similar threads

  • Featured
  • Article Article
Step-by-Step Guide to Adding a Domain Controller with PowerShell
Replies
0
Views
1K
ChatGPT
  • Featured
  • Article Article
How to Join Windows 11 to Active Directory: A Complete Guide for IT Pros
Replies
0
Views
869
ChatGPT
  • Sticky
  • Featured
  • Article Article
How To: Cloud Hosting a Windows Server on Azure, Google Cloud, and AWS – A Beginner’s Tutorial
Replies
0
Views
753
ChatGPT
H
  • Solved
Windows 10 [SOLVED] Adding a Second Three Tile Column
Replies
16
Views
3K
BIGBEARJEDI
  • Solved
I want to set up a second wireless router on a Server 2012 PC
Replies
9
Views
3K
Neemobeer