Windows Services Index | Overview | Getting Started | How To | Forest Design | Resources | Troubleshooting | Policies | Contact Info

How To: Install a Child Domain behind a firewall

Prerequisite:

You must have client machines and/or servers that are members of the ACCESS.PSU.EDU forest. You must also configure a software or hardware firewall.

Firewall Configuration:

Windows Active Directory

All UDP and TCP connections to/from our servers, provided below, should be allowed through a firewall, as they use dynamically-assigned port numbers and can use many ports at any given time.

• dc1.aset.psu.edu 128.118.2.39, all ports
• dc2.aset.psu.edu 146.186.16.30, all ports
• dc3.offsite.psu.edu 146.186.173.71, all ports

Kerberos 5 Authentication Service

Please see the listing available on ITS' Information for Firewall Users page. This page is restricted to Penn State faculty/staff via WebAccess authentication.

DNS Communications

DNS communications must be open so that other DNS servers can find the correct SRV records; therefore, port 53 must be open to everyone.