Add NIC with another subnets ip address to UCS directory node

UCS - Univention Corporate Server
#1

My goal is to make the LDAP server of a primary directory node (dc01.mynet.lan) available on a second ip subnet. E.g. my primary net is 192.168.50.0/24 with the UCS instance on 192.168.50.1 and now it should be available on 10.10.50.1, too.

For this I added a second NIC to the node’s VM and set the ip address on this new interface to 10.10.50.1. This works so far but now the DNS of the domain supplies not only 192.168.50.1 but both 192.168.50.1 and 10.10.50.1 for dc01.mynet.lan to clients. That does not work as the firewall does not allow routing, so I get timeouts when a client randomly chooses the “wrong” (that is, belonging to the other subnet) ip address.

Besides I found the article “How To Use … Multiple Interfaces In Different LANs” which discourages my configuration as far as I understand.

So my question is: what is the best practice approach to reach my goal? Thank you all!

#2

Hi again, thinking about this some more a solution would be to have the primary directory node only in the one (main) subnet and the traffic from other subnets routed via the firewall to the node or another solution would be a Replica Directory Node in the second subnet (routing the traffic between Replica Directory Node and Primary Directory Node via the firewall), right?!

Mastodon