Hello,

We have DA installed and working fine, but suddenly getting this error:

Forwarding is not enabled on the external adapter.

What does it means, what should I do?

Hi,

Let start with the basics. What is the firewall profile of your external network adapter?

If you have two network cards on your URA box, please be sure that your server cant' reach any of your domain controllers using the external network card.

have a nice day

I am seeing similar kind of error. What all things should i look for apart from the firewall rule?

-Ashish

Similar case with one or two network interface?

with two network adaptor.

Can your provide the output for NETSH INTERFACE IPV6 SHOW INTERFACE <LAN interface> and NETSH INTERFACE IPV6 SHOW INTERFACE <Public interface>. You might have the forwarding parameter configured to disabled.

The first one is for LAN and Second one is for External.

Hi,

Does not seems to be a configuration problem at this level. Can you confirm that firewall profile of the LAN interface is Domain profile? Internet facing interface must be public/private.

If that is correct too, then what should i check.

-Ashish

How can i check that using a powershell command. I am using windows 2012 server core edition as my base OS.

get-NetConnectionProfile

The issue was with the profile. Thanks Benoit for your help on this.

-Ashish

i am seeing same error on same computer and the external interface is showing domainauthenticated. i tried to run the following command but that failed work get-netconnectionprofile -interfacealias "Name of the Interface" | set-netconnectionprofile -networkcategory Public. I also tried deleting the registry key but that didn't work either " HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Nla\Cache\IntranetAuth ". My last resort should be to disable the traffic from external interface to the domain controllers.

-Ashish

Hi

It's hard to overide domain firewall profile, especially if the server can reach your domain using the external network interface. IMO, your only solution is to be sure that external network cannot be used to communicate with your internal network, so a dedicated VLAN.