Re: Load Balance Error Message

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi,

thanks for your reply, i dont have a route rule between internal and
external, as described below that is a nat rule (Nat rule beteen internal
and external and an nat rule between perimeter and external.

Is my config setup correctly?

Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines

- Route rule between Perimeter and internal
- Nat rule beteen internal and external
--> Nat rule between perimeter and external.

Henri.



"Shijaz" <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E50D5538-90E3-4F66-B9B2-6C9DCB2ACF80@xxxxxxxxxxxxxxxx
Under Configuration --> Networks --> Network Rules, did u create a "Route"
relationship between Internal and External networks?

Firstly, creating a "Route" between external and internal networks is a
not-so-good idea.

Secondly, if you can't live without the "Route", then you need to load
balance your external network. If you can't loadbalance your external
network, then you have to live with the error :).

For ISA networking best practices, see:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/bp_networks.mspx

--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Henri" wrote:

Hello,
i have problems in my ISA Array, below my config.

ISA Server 2006 Ent (previously ISA server 2004, same error message did
appear (listed below).
Multi Server Array (2 Servers)
Internal 172.16.1.0/24
DMZ 10.10.10.0/24
Array communication 192.168.249.0/24
External 195.35.xxx.xxx (ISA #1) / 82.92.xxx.xxx (ISA #2)

Internal network is load balanced
DMZ network is also load balanced,
External network is NOT Load balanced because this are 2 different DSL
lines

Network rules:
- Route rule between Perimeter and internal
- Nat rule beteen external and internal/perimeter
Everything works fine, but i want to get rid of this annoying message
below,
anyone ideas?
If i read the error message, it looks like the problem is related that i
load balance my internal and not my external network?
Error Message:
i have an reoccuring error message in the application log, the error is
also
logged in the alers section of the dashboard.

Event ID 21215:
An inconsistency in the Network Load Balancing (NLB) configuration may
result in inconsistent handling of traffic between the Internal network
and the External network. When a network rule specifying a route
relationship is defined between two networks, NLB must be enabled (or
disabled)
on both networks. To enable NLB for IPsec remote site networks, enable
NLB
on the network containing the local tunnel endpoint.
To enable NLB for VPN site-to-site and VPN client networks, enable NLB on
the selected access networks.
Alternatively, for the VPN Client network, you can designate a router for
routing traffic according to the static address pool.

Regards Henri





.

Relevant Pages

  • RE: Load Balance Error Message
    ... Secondly, if you can't live without the "Route", then you need to load ... network, then you have to live with the error:). ... External network is NOT Load balanced because this are 2 different DSL lines ... Nat rule beteen external and internal/perimeter ...
    (microsoft.public.isa.enterprise)
  • Re: Load Balance Error Message
    ... i still receive mails, and internet is working. ... To load balance between two different ... external network connections, you need to use 3rd party stuff like EMC ... as described below that is a nat rule (Nat rule beteen internal ...
    (microsoft.public.isa.enterprise)
  • Re: Spoof Protection With Firewall-1
    ... the network as well. ... In our NAT rule, we only change the destination address to agree with ... addresses in the DMZ networks. ... We don't modify the source address which is ...
    (comp.security.firewalls)
  • Re: Load Balance Error Message
    ... To load balance between two different ... external network connections, you need to use 3rd party stuff like EMC ... ISA by itself does not support multiple external interfaces on one box. ... Nat rule beteen external and internal/perimeter ...
    (microsoft.public.isa.enterprise)
  • Re: pf - howto enable connection between 2 win2k PCs w2k<>$ext_if<[OBSD-pf]>$int_if<&
    ... Set routing on your WIN2K-1 so that all packets addressed ... Use no nat rule to disable natting packets coming from network ...
    (comp.unix.bsd.openbsd.misc)