How to get access from different vlan to Active Directory?

Question

Active Directory

Good afternoon! I configure vlan in a grid. With this, everything worked out.
Routing is performed, machines from different vlans respond
Began to transfer slowly servers from ms sql to separate vlan. And then there were problems:
1. The entry with the new host ip on the dns server is not updated.
2. When connecting via rdp to a server with ms sql under a domain user account, it writes an incorrect username.
I think that you most likely need to open ports in the firewall on the domain controller. But what and in what direction I do not understand.
Maybe there is some other solution?

Answer 1

Assuming that vlan and routing between subnets are configured correctly, dig in the direction of DNS. Does the domain resolve from the sql server? nslookup mycompany.com must return the ip of the controller

Answer 2

What do you build velans on? What equipment? You see, velans are the second level of the OSI model, routing between packets occurs at the level of smart equipment of the 3rd level. You need to explain on second-level devices with helpers where you will have a domain controller, DHCP, etc. On Cisco, this is easy.

Answer 3

one -

I configure vlan in the grid

what for?
2-

I think that you most likely need to open ports in the firewall on the domain controller

no. it is necessary either to ensure the presence of a DC in all vlans where there may be DC clients. or stop perversions.

Answer 4

DC/DNS need to know that those other networks are "theirs".
Including the firewall should be notified about this
p / s / not quite on the topic, but: routing between vlan on the router is a bit heavy and the speeds will not be so hot ... you should look at the L3 / L2 + switch (s) - which can route switching speed packets