how to integrate mikrotik dhcp with Active Directory

RouterOS Beginner Basics
1

As the subject stated the purpose of this post, can it possible that i intergrate a mikrotik with windows 2003 AD? where i want to use mikrotik as firewall as well as dhcp server and winodws 2003 server as domain controller as well as dns server.

thanks

2

Any update??? please share your experience

3

I can’t see any problems at all. Just do it. If your set up is “simple” I see no problem. If the server is a domain controller, make sure the scope options are the same as what you would get on the dhcp server on the 2K3 server. I.e. Set DNS scope pointing to the DC server and domain name suffix the same as the server’s.

4

here is my scenario,

I want that Mikrotik give the ip to may clients (a.k.a act as dhcp server) and then mikrotik will automatically update the DNS records when giving out a new lease to a client computer.

Then I want to create the queue for each user on mikrotik in order to limit the user bandwidth.

then i want to implement all the filtering on mikrotik…

Please tell me, i can achieve this scenario? If yes, please point out me in right direction.

thanks in advance

5

I do this for all my 24+/- sites with wan links and all. DHCP is on for each site, AD clients are happy as long as the config is correct.

Here is my dhcp server config on the MT

[admin@core.router] /ip dhcp-server> print detail 
Flags: X - disabled, I - invalid 
 0   name="dhcp1" interface=bridge1-lan lease-time=3d address-pool=dhcp_pool1 bootp-support=static authoritative=after-2sec-delay

I put my full domain details in so that the DHCP server dishes out all the settings. Like this working example…

[admin@core.router] /ip dhcp-server network> print detail
 0 address=192.168.0.0/24 gateway=192.168.0.1 dns-server=192.168.0.2,192.168.1.2 domain="yourdomain.local"

I remember doing this too, all I did was use the gui DHCP setup tool. Add the missing bits under network when you are done with the gui.

Hit me with questions if you like.

R

6

thanks man, i did the same…but still i have some questions that i will post soon.