Ports

In the event that you need to separate your domain controllers with firewalls you will need to open several ports. Here is a good article that will help you with identifying those ports. http://technet.microsoft.com/en-us/library/bb727063.aspx