Re: Load Balance Error Message

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Thanks again,

i have NOT load balanced my external connection, but one external connection
is an DSL line the other one is a cable connection, so when carrier is down,
i still receive mails, and internet is working. Is this not a supported
config??

Regards

"Shijaz" <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E34CD9D-22DF-4F47-A8A7-676D2318267A@xxxxxxxxxxxxxxxx
Your set up looks fine to me, although two different external connections
is
not something that ISA handles. To load balance between two different
external network connections, you need to use 3rd party stuff like EMC
RainConnect.

ISA by itself does not support multiple external interfaces on one box.
But
in your case you're fooling ISA into believing that its the same external
connection on both nodes.

For a list of unsupported configs, see:

Troubleshooting Unsupported Configurations in ISA Server 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/unsupportedconfigs.mspx

EMC RainConnect (NLB multiple ISPs)
http://www.emc-rainwall.com/

--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Henri" wrote:

Hi,

thanks for your reply, i dont have a route rule between internal and
external, as described below that is a nat rule (Nat rule beteen internal
and external and an nat rule between perimeter and external.

Is my config setup correctly?

Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines

- Route rule between Perimeter and internal
- Nat rule beteen internal and external
--> Nat rule between perimeter and external.

Henri.



"Shijaz" <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E50D5538-90E3-4F66-B9B2-6C9DCB2ACF80@xxxxxxxxxxxxxxxx
Under Configuration --> Networks --> Network Rules, did u create a
"Route"
relationship between Internal and External networks?

Firstly, creating a "Route" between external and internal networks is a
not-so-good idea.

Secondly, if you can't live without the "Route", then you need to load
balance your external network. If you can't loadbalance your external
network, then you have to live with the error :).

For ISA networking best practices, see:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/bp_networks.mspx

--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Henri" wrote:

Hello,
i have problems in my ISA Array, below my config.

ISA Server 2006 Ent (previously ISA server 2004, same error message
did
appear (listed below).
Multi Server Array (2 Servers)
Internal 172.16.1.0/24
DMZ 10.10.10.0/24
Array communication 192.168.249.0/24
External 195.35.xxx.xxx (ISA #1) / 82.92.xxx.xxx (ISA #2)

Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines

Network rules:
- Route rule between Perimeter and internal
- Nat rule beteen external and internal/perimeter
Everything works fine, but i want to get rid of this annoying message
below,
anyone ideas?
If i read the error message, it looks like the problem is related that
i
load balance my internal and not my external network?
Error Message:
i have an reoccuring error message in the application log, the error
is
also
logged in the alers section of the dashboard.

Event ID 21215:
An inconsistency in the Network Load Balancing (NLB) configuration may
result in inconsistent handling of traffic between the Internal
network
and the External network. When a network rule specifying a route
relationship is defined between two networks, NLB must be enabled (or
disabled)
on both networks. To enable NLB for IPsec remote site networks, enable
NLB
on the network containing the local tunnel endpoint.
To enable NLB for VPN site-to-site and VPN client networks, enable NLB
on
the selected access networks.
Alternatively, for the VPN Client network, you can designate a router
for
routing traffic according to the static address pool.

Regards Henri








.



Relevant Pages

  • Re: Load Balance Error Message
    ... To load balance between two different ... external network connections, you need to use 3rd party stuff like EMC ... ISA by itself does not support multiple external interfaces on one box. ... Nat rule beteen external and internal/perimeter ...
    (microsoft.public.isa.enterprise)
  • Summary: Load balance in IP Multipathing not observed on V240 server
    ... Sun IPMP ONLY "load balance" outgoing network traffic. ... The in-bound network traffic still switch over from one NIC to another ... > traffic on both NICs repeated on an hourly fasion. ...
    (SunManagers)
  • Load Balance Error Message
    ... DMZ network is also load balanced, ... Nat rule beteen external and internal/perimeter ... load balance my internal and not my external network? ... To enable NLB for IPsec remote site networks, ...
    (microsoft.public.isa.enterprise)
  • Re: win 2003 / isa 2004 / multiple adsl connection
    ... > Can isa handle multiple adsl connections and load balance the network load ... Short answer is you can't have two separate external networks in ISA2004. ... Whatever ADSL line you assign to the external network will be the default ...
    (microsoft.public.isaserver)
  • drone armies C&C report - July/2005
    ... 3356 LEVEL3 Level 3 Communications ... 3491 BTN-ASN - Beyond The Network A ... 3801 MISNET - Mikrotec Internet Ser ... 15857 DIALOG-AS DIALOG-NET Autonomuo ...
    (Bugtraq)