Re: Load Balance Error Message
- From: "Henri" <henri@xxxxxxxxxxxxx>
- Date: Fri, 4 Aug 2006 16:19:48 +0200
Thanks again,
i have NOT load balanced my external connection, but one external connection
is an DSL line the other one is a cable connection, so when carrier is down,
i still receive mails, and internet is working. Is this not a supported
config??
Regards
"Shijaz" <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E34CD9D-22DF-4F47-A8A7-676D2318267A@xxxxxxxxxxxxxxxx
Your set up looks fine to me, although two different external connections
is
not something that ISA handles. To load balance between two different
external network connections, you need to use 3rd party stuff like EMC
RainConnect.
ISA by itself does not support multiple external interfaces on one box.
But
in your case you're fooling ISA into believing that its the same external
connection on both nodes.
For a list of unsupported configs, see:
Troubleshooting Unsupported Configurations in ISA Server 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/unsupportedconfigs.mspx
EMC RainConnect (NLB multiple ISPs)
http://www.emc-rainwall.com/
--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver
"Henri" wrote:
Hi,
thanks for your reply, i dont have a route rule between internal and
external, as described below that is a nat rule (Nat rule beteen internal
and external and an nat rule between perimeter and external.
Is my config setup correctly?
Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines
--> Nat rule between perimeter and external.- Route rule between Perimeter and internal
- Nat rule beteen internal and external
Henri.
"Shijaz" <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E50D5538-90E3-4F66-B9B2-6C9DCB2ACF80@xxxxxxxxxxxxxxxx
Under Configuration --> Networks --> Network Rules, did u create a
"Route"
relationship between Internal and External networks?
Firstly, creating a "Route" between external and internal networks is a
not-so-good idea.
Secondly, if you can't live without the "Route", then you need to load
balance your external network. If you can't loadbalance your external
network, then you have to live with the error :).
For ISA networking best practices, see:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/bp_networks.mspx
--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver
"Henri" wrote:
Hello,
i have problems in my ISA Array, below my config.
ISA Server 2006 Ent (previously ISA server 2004, same error message
did
appear (listed below).
Multi Server Array (2 Servers)
Internal 172.16.1.0/24
DMZ 10.10.10.0/24
Array communication 192.168.249.0/24
External 195.35.xxx.xxx (ISA #1) / 82.92.xxx.xxx (ISA #2)
Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines
Network rules:
- Route rule between Perimeter and internal
- Nat rule beteen external and internal/perimeter
Everything works fine, but i want to get rid of this annoying message
below,
anyone ideas?
If i read the error message, it looks like the problem is related that
i
load balance my internal and not my external network?
Error Message:
i have an reoccuring error message in the application log, the error
is
also
logged in the alers section of the dashboard.
Event ID 21215:
An inconsistency in the Network Load Balancing (NLB) configuration may
result in inconsistent handling of traffic between the Internal
network
and the External network. When a network rule specifying a route
relationship is defined between two networks, NLB must be enabled (or
disabled)
on both networks. To enable NLB for IPsec remote site networks, enable
NLB
on the network containing the local tunnel endpoint.
To enable NLB for VPN site-to-site and VPN client networks, enable NLB
on
the selected access networks.
Alternatively, for the VPN Client network, you can designate a router
for
routing traffic according to the static address pool.
Regards Henri
.
- Follow-Ups:
- Re: Load Balance Error Message
- From: Shijaz
- Re: Load Balance Error Message
- References:
- Load Balance Error Message
- From: Henri
- RE: Load Balance Error Message
- From: Shijaz
- Re: Load Balance Error Message
- From: Henri
- Re: Load Balance Error Message
- From: Shijaz
- Load Balance Error Message
- Prev by Date: Domain not connnected after installation ISA 2004
- Next by Date: Re: Load Balance Error Message
- Previous by thread: Re: Load Balance Error Message
- Next by thread: Re: Load Balance Error Message
- Index(es):
Relevant Pages
|