Add computer to a domain trough NAT

Tacko — Sat, 09 Mar 2019 01:30:22 GMT

Hi.

I have a firewall ASA5516-X and have this issue that i don't know if it could be accomplished.

I have read in a blog that this can't be done, but first I would like to ask here.

I have 2 firewalled networks.

Over PORT1 I have a network that has a Windows Server 2016 Domain Controller with its DNS.

Over PORT2 I have another firewalled network with different range.

I have created an Access Rule in between the 2 subnetwork in which I permit all the traffic for all of these ports

and a NAT .

- I can ping from 10.10.10.20 to 10.10.10.10

- I modified on PC 10.10.10.20 the file windows\drivers\hosts a line to say that TESTING.COM = 10.10.10.10

so I can ping TESTING.COM

But when I try to add PC to the domain TESTING.COM it fails.

"An existing connection was forcibly closed by the remote host."

(error code 0x00002746 WSAECONNRESET)

Many thanks

topic Add computer to a domain trough NAT in Cisco Catalyst Center