• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 General questions on array names and NLB

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> ISA 2006 General questions on array names and NLB Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 General questions on array names and NLB - 10.Dec.2008 3:01:51 PM   
wilbudl

 

Posts: 15
Joined: 23.Jul.2008
Status: offline
Configuration:  3 servers; 1 CSS, 1 existing array member, 1 future array member

  • When defining an array, one is required to give it a DNS name.  Should this DNS name resolve to the IP address of one of the servers in the array, or is there an assumption that NLB is being used and the defined name will resolve to a VIP?
  • Can NLB be enabled prior to adding the second server to the array, and will the added server pick up the settings including enabling NLB and adding the VIP's to the NIC?
  • When initially enabling NLB, it asks for the "Primary VIP".  Is this something other than just the first IP address to be load balanced (ie bullet #1)?  Should it not be used to publish sites and services?

Regards,
Darryl
Post #: 1
RE: ISA 2006 General questions on array names and NLB - 10.Dec.2008 6:37:12 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Hey Darryl,

Q1:

In my experience, the array DNS name is just a virtual name for the array. Of all the ISA client types, I think this parameter is only actually consumed by the firewall client when you used the automatic detection facility.

If you are sticking to MS best practice, it is recommended to use DNS round robin for firewall clients as they don't play well with NLB. Hence the array DNS name would be a virtual DNS name which provides the dedicated IP addresses of all array members, defined in a round robin fashion.

I am not 100% sure on this, so I would be keen on comments from other forum members here...

Q2:

Yep - this is the ideal scenario if starting with a single server setup and makes adding the new array member a breeze

Q3:

The primary VIP is the first load balancing IP address that is shared between array members. Normally the primary VIPs become the default gatways in each ISA network.

I tend to leave the primary VIP as a routing/gateway VIP and then use additional VIPs for publshing needs. There is no technical reason for this, it just keeps things more logical to me and normally makes it easier for the networking guys to understand

Cheers

JJ 

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to wilbudl)
Post #: 2
RE: ISA 2006 General questions on array names and NLB - 11.Dec.2008 10:37:26 AM   
wilbudl

 

Posts: 15
Joined: 23.Jul.2008
Status: offline
Jason,
As usual, thank you for your guidance.  I have to say that this is truly a great place to get assistance for the ISA product line.

Regards,
Darryl

(in reply to Jason Jones)
Post #: 3
RE: ISA 2006 General questions on array names and NLB - 11.Dec.2008 12:11:08 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Cool, yeah, it's a very useful community

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to wilbudl)
Post #: 4
RE: ISA 2006 General questions on array names and NLB - 16.Dec.2008 8:36:19 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Jason,

RE: the array name for the FWC's, that's how I understand the recommendations too. Only SecureNAT clients are fully supported for NLB. Then you can use client-side CARP for the Web Proxy clients and DNS RR for the FWCs.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Jason Jones)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> ISA 2006 General questions on array names and NLB Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts