actually I setup a 2012 R2 Server and try to join with W7 clients from different subnets without success. The CCR holds on eth5 both subnets. A join from the same subnet is working.
In addition I run the MS tool portquery without havin any issues, related AD and trust between a client and the DC
Is there something special that I have to setup on the routeros firewall eg?
Maybe a DNS issue? W7 computers need to find the domain controller responsible for your domain. Subnet #1 is probably using the Win 2012 server as DNS already? So Dns records are already set.
Try setting DNS for subnet #2 to point to your Win2012 server.
in fact it was one DNS entry inside the firewall rules.
chain=input action=drop protocol=udp in-interface=!ether5 dst-port=53 log=no log-prefix=“dnsdrop”
after disabling the rule the Domain join is working but I have to complain I am unsure about the reason.
in-interface=!ether5 means to me drop all depending udp traffic unequal ether 5 and during this issue the ccr was connected over eth1, wan’’ and eth5, lan’’