Trying to join my Domain over other site using pfSense IPSEC Tunnel

[pythonoid]

I have made an IPSEC tunnel and it pings both sides smooth. Somehow, it is unable to join my AD over the other side. I tried to port scan the 53 port and it is shown filtered, I have enabled port 53 or dns port over pfsense, and all machines/ firewall in between.

Still no luck, and when I run nslookup to the machine, it shows no details of the the server fully qualified domain.

Do I have to configure anything to allow at pfsense end? what things matter at pfsense to make AD join using pfsense gateway.

[doktornotor]

Your IPsec rules on the IPsec tab should be allow any. Definitely until you figure things out. There's a lot more to AD than DNS.

[iorx]

Hi! I'll try to give you a hint here. I've got this scenario and it works fine.
You can do it in two ways.

The simplest

• Manually specify AD-DNS as DNS on the client which you want to join

• Join domain with the full domain name, eg. mydomain.sample

The other way.

• Verify that pfSense can route traffic through the tunnel (use workaround with LAN-gateway) Documented here

• Add AD-DNS to DNS Resolvers Domain Overrides, eg mydomain.sample points to your AD-DNS

• Join domain with the full domain name, eg. mydomain.sample