Does NLB support different subnet at Extarnal or Internal NIC ? (Full Version)

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure



Message

moshiur -> Does NLB support different subnet at Extarnal or Internal NIC ? (30.May2008 5:33:50 PM)

Hello! I am planning to install ISA 2006 Enterprise edition at both places ( Area: B & Area: C) in my complex INTRANET. My target is to provide redundant internet connectivity to either one place by HSRP or load lancing at both places. What I found in Microsoft ISA 2004 (EE) document ( http://download.microsoft.com/download/6/9/0/690d2ee7-a4e0-4c0a-80d4-1e30ebcac1de/ISA_2004_EE_Configuration_Guide.doc ) everywhere they used same subnet for NLB at both ISA.  
I coordinated to both ISP's and they agree to provide us BGP for failover & failback between Router B & Router C.
I can configure my routers two ways:
1.       HSRP configure between two routers so that either one ISP should work in my Enterprise internal network.
2.       Bandwidth load balance between two ISP's
I don't have any problem with ISP's as they are giving BGP facilities. I can provide internet at both ISA external Interface with Public IP.   
 
Area: B
External NIC
DIP: 202.40.186.1
SM: 255.255.255.0
DG: 202.40.186.2
ISA 2006 EE (Enterprise Edition)
Internal NIC
DIP: 172.16.4.4
SM: 255.255.248.0
DNS: 172.16.4.51
Area: C
External NIC
DIP: 203.76.127.5
SM: 255.255.252.0
DG: 203.76.127.4
ISA 2006 EE (Enterprise Edition)
Internal NIC
DIP: 172.16.144.4
SM: 255.255.248.0
DNS: 172.16.4.51
 
To configure NLB
Qustion1: I am not sure weather it should work with different subnet or not. Do I have to use same series public IP /or same subnet at both place? 
 
Question2:  If I keep online both ISA to supply us internet at both places,  does it support redundant / NLB  to each other ?
 
Question3: If ISA( AreaB) goes down, does ISA (area:C ) take over all connectivity ?

I have given here my diagram for your sugession. Please share your advice for best solution.


[image]http://i29.tinypic.com/332q7er.jpg[/image]



Jason Jones -> RE: Does NLB support different subnet at Extarnal or Internal NIC ? (2.Jun.2008 5:06:14 AM)

Nope, NLB is currently subnet bound.

The best you can do is use ISA EE and create two arrays (one at each location) as this would allow for Enterprise management and allow each site to scale.

You could then use two servers at each location with NLB to provide ISA load balancing and failover. You could intially start with a single server at each site (albeit without server HA) and then add more servers when you can.

Cheers

JJ



moshiur -> RE: Does NLB support different subnet at Extarnal or Internal NIC ? (2.Jun.2008 11:13:59 AM)

Hi Jason Jones

The thing is that we are using single domain in our enterprise internal network and its a nationalwide WAN connected to each dristricts where allowed internet users group is based on windows authentication. I mean all users are  web proxy clients. I configured ISA 2006 EE (Enterprise Edition ) at AREA: B and where web mail (Exchange server at Internal Network) published through ISA.  

PLAN for Area: C
We have our enough resource ( Hardware & Software ISA server 2006 EE) at AREA: C but I am waiting to get a right plan so that we can use one another reduandant server/failover  for both ISP.

IP subnets are different at both place of datacenter (Production & DRS). I am giving in below exectly the same all IP :
Area: B
External NIC
DIP: 202.40.186.18  ( ISP-1)
SM: 255.255.255.240
DG: 202.40.186.17
ISA 2006 EE (Enterprise Edition)

Internal NIC
DIP: 172.16.4.4
SM: 255.255.254.0
DNS: 172.16.4.51

Area: C
External NIC
DIP: 203.76.127.10  ( ISP-2)
SM: 255.255.255.248
DG: 203.76.127.9
ISA 2006 EE (Enterprise Edition)
Internal NIC

DIP: 172.16.144.4
SM: 255.255.248.0
DNS: 172.16.4.51

I am not clear from your shote notes. Can you please explain me details ? or give me any example ?

Best Regards

Moshiur Rahman Khan



Page: [1]