You are unable to establish a two one-way trust between separate domains
where IP communication passes through a router that has Network Address
Translation (NAT) enabled.
Back to the top
A Windows NT Trust relationship uses NetBIOS Datagram Services. Network
devices implementing NAT do not translate addresses in the NetBIOS header.
Some Routers enable Fast Packet Switching to increase performance by just
analyzing the IP Header and not the NetBIOS Datagram header, which is where
the Source IP Address is located.
A Windows NT Trust relationship uses NetBIOS Datagrams. To successfully
negotiate a trust relationship, the source IP address in the NetBIOS header
must be correct. Most network devices implementing NAT do not translate the
IP addresses in the NetBIOS header.
Back to the top
To resolve this problem, disable 'Fast Packet Switching' on your Router.
Back to the top
In order for packets to pass between two domains separated by a router
running NAT, you should ensure that the Fast Page Switching function of the
router/NAT software combination is disabled. Fast Page Switching is
sometimes shipped with a default of ENABLED when installed. This provides
for faster throughput of packets but prevents the NAT device from
performing proper address translation on a per-packet basis.
Back to the top
Help and Support
