AD RMS NLB Cluster

Hello Experts,
I have 2 servers NLB cluster, and deploy on it AD RMS 2012. I can access RMS 01 and RMS02 Successfully.
I create Record in DNS with NLB Cluster IP, I can't access URL of RMS Cluster.
The error message is as below
How to fix this problem?
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Hi Andrzej,
I created SQL on Backend for both RMS.
Yes, I imported SSL certificate on second node and i can access second node also but My problem, that i can't access virtual node of cluster on RMS Management Console.
Yes, I try ti access ADRMS Console with admin account.
Yes, RMS.Lab.com added to local intranet and all operation of RMS is worked successfully.
I think that you can't access virtual node of cluster on RMS Management Control if "RMS.Lab.com" direct to virtual ip of NLB and you need to manage RMS by access physical node and configure from it.
Thanks for your reply.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Similar Messages

ADFS server in NLB cluster unable to reach all servers in the same subnet

I have 2 ADFS (3.0) virtual servers (server 2012 R2 on VMware) in an NLB cluster (setup for Office 365 initially) and want to be able to use the SAML to connect to a couple of Linux servers in the same network to allow SSO to the Linux boxes.
It was working then stopped and now the primary FS server (FS1) cannot ping either Linux box or one of our WS08R2 file and print servers. It can ping all other servers in the same network.
I tried to get a packet capture with MS NetMon 3.4 but it only picked up the successful ping requests.
Firewall is disabled but that made no difference.
NLB cluster configured in Unicast mode as I found Office 365 and another outside service didn't want to work using Multicast or IGMP Multicast.
The really bizarre thing is the secondary FS vm can ping the other boxes even with "ping server -S clusteraddress"
Any suggestions as to where to look to track this down will be most welcome.
Cheers
David
Cheers, David

Hi,
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thanks for your understanding and support.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Add port rule nlb cluster

Hello,
I have a two-node NLB cluster (Wk28 R2),
The thing is that I want to add another port rule, and then I go to
"Host Properties" \ "Port rules" , and there I see the ones I have created so far, but the "add" button" is grey , not enabled.
I am logged in as the Domain administrator, and it was me who created the nlb cluster with the same user.
I am new to NLB, so I am probably missing something.
THANKS IN ADVANCE!
Luis Olías Técnico/Admon Sistemas . Sevilla (España - Spain)

Hi Luis Olias,
Could you reconfirm the following conditions of NLB manager required?
When you are using Network Load Balancing (NLB) Manager, you must be a member of the Administrators group on the host that you are configuring, or you must have been delegated the appropriate authority. If you are configuring a cluster or host by running
NLB Manager from a computer that is not part of the cluster, you do not have to be a member of the Administrators group on that computer.
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Access NLB cluster from outside

I crated nlb cluster using 3 servers, one is used to create cluster and other 2 for hosts. I assigned 192.168.1.2 for cluster ip. Every server has two nic and one of nic connected to public ip. My worry is how can I access cluster from out side? As mentioned
in
this question I asked my server provider enable NAT and this is their reply. "We dont offer any NAT solutions but you can easy set up one of your servers to perform this."
can anyone tell me how can I do this?
chapneox

Hi chapneox,
Could you clarify your question, I am not quite understand your description “can I access cluster from out side”. You can use the “Internet” IP address as your NLB virtual
IP address. But if your cluster after NAT or firewall you must map the NLB port from the NAT or firewall device.
More information:
Establish Communication in NLB Clusters
http://technet.microsoft.com/en-us/library/bb687525.aspx
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Staging the NLB cluster Static port change of Exchange 2010 CAS or do it all in one day ?

Folks,
Here is the server deployment in my AD domain:
Email flow and Outlook client connection go through the NLB cluster VIP email.domain.com.au which is served by the following server:
PRODHT-CAS01 (HT-CAS Server Windows NLB node 1)
PRODHT-CAS02 (HT-CAS Server Windows NLB node 2)
Public Folder access through Outlook client goes through the following servers:
PRODMBX01 (Stand-alone Mailbox Server 1) no DAG
PRODMBX02 (Stand-alone Mailbox Server 2) no DAG
Can I make the changes first on the first stack of Exchange Server set as below first:
PRODHT-CAS01 (HT-CAS Server NLB node 1)
PRODMBX01 (Stand-alone Mailbox Server 1) no DAG
in order to test the Outlook email & Public Folder connectivity in the first week and then followed by the rest of the server set:
PRODHT-CAS02 (HT-CAS Server NLB node 2)
PRODMBX02 (Stand-alone Mailbox Server 2) no DAG
would that cause the NLB or user email access problem?
Do I have to make the changes all in one day for those four servers followed by the reboot?
Reason of changing: The hardware load balancer (Riverbed) requires to have static RPC port to work properly.
This is the article to change the Static port in my NLB cluster Exchange HT-CAS server role on Exchange Server 2010 SP2: http://social.technet.microsoft.com/wiki/contents/articles/864.configure-static-rpc-ports-on-an-exchange-2010-client-access-server.aspx
Thanks in advance.
/* Server Support Specialist */

All the servers behind the load balancer must be the same.
You can change the stand alone MBX server's RCA port as that traffic is not load balanced.
Changing Exchange is straight forward, just be careful to enter the registry keys correctly and then check AB and RCA is listening on the new static ports after you restart the services.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
Rhoderick,
Many thanks for the suggestion. My goal here is to minimize any impact / email service downtime to the user while configuring the static ports.
1. Do I have to dissolve the Windows NLB cluster after the static port configuration on both HT-CAS servers or can I still keep the NLB cluster?
2. "All the servers behind the load balancer must be the same." Do you mean do I have to do the static RPC port the same day for all server set ?
/* Server Support Specialist */

Setting up NLB cluster to resolve nodes from GEO location.

Hi,
Is it possible that I can configure NLB cluster to load balance my application servers located in different GEO location?
I do have site to site between these locations but nodes will have static IP address in different subnet?
can this limitation be taken care of using NLB on Win 2012R2 or using a hardware load balancer?
So I want to understand clearly about limitation for nodes to be in same subnet is for servers part of NLB cluster or is it for application hosts that NLB is serving to.
BR,

Hi,
Is it possible to use NLB through a router in two different datacenter?
Yes, we can use NLB through a router. However, please do not plug the nods of NLB to a router or a layer 3 switch directly. Besides, deploy NLB with single case mode may avoid
potential connectivity problems.
A single NLB cluster is not typically deployed across multiple sites (for a number of reasons the technology is best suited to a broadcast-capable LAN environment). Instead,
multiple, independent NLB clusters are typically deployed, one at each site. The sites are then “federated” into a single service to clients using features such as DNS round-robin to “load balance” client requests across the different sites. Internally, NLB
can be used to load balance requests sent to a given site amongst the nodes in that site.
The similar thread:
NLB Question
http://social.technet.microsoft.com/Forums/windowsserver/en-US/a402ed55-2f13-4523-848c-fc1d685029a5/nlb-question
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Got request timed out when ping network load balancing (NLB) cluster ip

I want to set up NLB on windows 2008 R2 64
bit
Server1 : private ip 192.168.1.100 ; public ip 172.1.1.1
Server2 : private ip 192.168.1.101 ; public ip 172.1.1.2
private ip 100/101 can be communicated with each other, but cannot reach from other servers, even with same subnet.
Cluster ip: 172.1.1.3
After created NLB with Unicast, I can ping the cluster ip from these 2 servers, but when I enter the cluster ip in browser, got http 404 not found error; and cannot ping the cluster ip from other servers.
Awen

Hi,
In your figure, the cluster IP is 172.18.5.22. Does there have some mistype in your post? Another possible is you set the incorrect IP address binding with the IIS service.
More information:
Add and Remove IP Address Bindings
http://technet.microsoft.com/en-us/library/bb734869.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Two NLB Cluster at one CAS Server

Hi Team
I have a issue, I have three CAS Server with CAS array configuration enable.
and then I have third party app in my CAS server.
so I have two cluster nlb config in my CAS server, one is a securemail.contoso.com
the member is CAS01 and 02. this is for third party app
the other is webmail.contoso.com
this is for Exchange CAS. the member is CAS01,02,and 03
suddenly my CAS01 cant be ping and I had event id nlb 18
http://technet.microsoft.com/en-us/library/dd348820(v=ws.10).aspx
I there any misconfig with my CAS?
Thanks

Hi Ichwan Lubis,
I think it should be an NLB issue which is more than an Exchange issue. I’d like to know whether the Outlook lost the connection when the CAS01 was down. Does the CASArray automatically
failover to other CAS members?
For NLB event errors, it’s recommended to ask on our Windows Server forum:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver
Thanks,
Simon Wu
TechNet Community Support

NLB Cluster problem

I'm trying to implement Network Load Balancing for my VPN Servers. I have 2 Window Server 2008 R2 running as VPN Server integrated TMG2010 Firewall. Both nodes can ping from one node to another node. On the first node, I tried to connect to the second
node many time through External Interface but failed. When I click connect, it always appear the error "The RPC Server is unavailable on the specified computer". I also tried to disable RPC Restrict from TMG Firewall Policy but it doesn't help. How
can I resolve this problem?

Hi,
Could you clarify “I tried to connect to the second node many time through External Interface but failed.” How did you do that.
Please disable the Windows built-in firewall first. Which type of the NLB mode you are using? If all interface are set to run NLB in “unicast” mode, NLB Manager will fail to connect to hosts.
The similar thread:
Strange warning message while opening NLB Manager
http://social.technet.microsoft.com/forums/windowsserver/en-US/f9a8330a-d114-4f02-8fbe-5d0c36bb3e49/strange-warning-message-while-opening-nlb-manager
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

One of AD RMS cluster servers always asks for credential

I have created AD RMS cluster on Windows Server 2012 R2.
and I have configured NLB between the two servers but when users try to connect to second cluster server they cannot connect to it as it always ask for credentials.
I have put cluster name as trusted site on all clients.
Also I have noticed that AD RMS logging service doesn't exist any more on Windows Servers 2012 R2.
a

Hi Ahmed-Mahmoud,
Please try to populate the IE local intranet sites with the appropriate URLs, credentials not automatically sent to RMS unless cluster/server names are in the IE Local Intranet
sites.
Active Directory RMS Stop entering user's credential when opening files
https://social.technet.microsoft.com/Forums/en-US/2af38d78-bc2f-4882-ab4f-b155f08c30c1/active-directory-rms-stop-entering-users-credential-when-opening-files?forum=rms
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

NLB detected duplicate cluster subnets - Exchange Server 2010 SP3 CU5

Hi All,
I will explain the environment first, there are:
-Two HUB/CAS servers (WNLB)
--HUBCAS01
--HUBCAS02
-Two Mailbox servers (Failover Clustering)
--MAILBOX01
--MAILBOX02
*All servers are updated to Exchange Server 2010 SP3 CU5.
The issue is that from recently outlook users are disconnecting from the outlook and cannot be joined to the exchange server unless if I drainstop or stop HUBCAS01. Furthermore, if I start HUBCAS01 from WNLB it will work fine for sometimes yet it will randomly
disconnects outlook users from exchange again (For ex: next day morning).
So far when I search deeper in Event log, there is an warning event log:
Event ID 18: NLB cluster [192.168.*.*]: NLB detected duplicate cluster subnets. This may be due to network partitioning, which prevents NLB heartbeats of one or more hosts from reaching the other cluster hosts. Although NLB operations have resumed properly,
please investigate the cause of the network partitioning.
Now I hope you will provide this link to resolve this issue - http://technet.microsoft.com/en-us/library/cc726421(v=ws.10).aspx
But I don't think that this will resolve this issue, as i have tried this for 3 times, yet no luck. Please help me to resolve this issue permanently. Thanks in advance.

Hi,
The issue is mainly related to the HUBCAS01 server. To deep investigate the issue, you need to take RPCTrace from the Outlook client and see the details. Even more, it’s better
to take a Network trace to check the details of the network.
Thanks,
Simon Wu
TechNet Community Support

NLB Node Participating in Cluster But Not Listed in Manager

I have a NLB cluster that has been setup for several months and everything is working as expected. After an unexpected reboot of one of the nodes, I no longer see that node in the NLB manager
when from node A I attempt to add node B to the cluster it fails with the following error message:
"The specified host is already part of this cluster."
How can I resolve this situation?
Babu

Hi Babu007,
Could you tell us what load balancing type you are using, multicast or unicast? Did you found any event when the node failed join to cluster. Did you tried to remove and re-adding
the NLB node again.
More information:
Selecting the Unicast or Multicast Method of Distributing Incoming Requests
http://technet.microsoft.com/en-us/library/cc782694(v=ws.10).aspx
when to use nlb unicast or multicast?
https://social.technet.microsoft.com/Forums/forefront/en-US/969f37a0-6838-4d1d-a56a-e35aa9a780f5/when-to-use-nlb-unicast-or-multicast?forum=Forefrontedgegeneral
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

NLB Error: NLB detected duplicate cluster subnets. This may be due to network partitioning

We're running two servers in a datacentre, call them WEB1 and WEB2 in unicast NLB mode.
Each server has a public NIC, the NLB adapter and a private NIC for communication between hosts. We have a VLAN between the public NICs so the cluster IP is routed to both hosts. I can access the Virtual IP just fine, and hosts can talk on the separate private
network. The public NICs are connected up to a Cisco switch with a VLAN between two ports, one for WEB1 and one for WEB2 (all done by the datacentre).
Intermittently on WEB2, I lose connection from my local machine and the Event Logs show multiple:
NLB cluster []: NLB detected duplicate cluster subnets. This may
be due to network partitioning, which prevents NLB heartbeats of one or more
hosts from reaching the other cluster hosts. Although NLB operations have
resumed properly, please investigate the cause of the network partitioning.
WEB1 works just fine and doesn't suffer from these issues. Removing WEB2 from the NLB cluster leaves everything working fine (with just the single WEB1 left).
Perhaps unrelated but for WEB1 & WEB2, the interface metric for the private NIC is 10 while the public NIC is 20 (although 'route print' shows much higher values around 270-300). [seems this is correct according to http://blogs.technet.com/b/tristank/archive/2004/06/08/150734.aspx]
Really hoping someone can help as NLB seems a great solution!
Thanks ever so much

Hi, no luck with this I'm afraid. Both NICs are configured the same, not sure what you mean by the NIC binding order. Cabling is definitely fine.
We're just sticking it out. As this is running on a live set up I had to get things working so put the NLB cluster into Single Host mode with WEB1 as the default host. This meant traffic worked fine while I still had frequent disconnections to WEB2.
After about 24 hours, the error stopped. When anything changes the cluster, ie one of the servers is restarted for updates, it does this error for about 24 hours then settles down.
I have no idea if the Single Host mode is helping this or not - perhaps it just takes 24 hours for it to settle down. Would it also settle down if I wasn't in Single Host mode? No idea and won't try it as its a live set up. Is NLB working properly? Most
probably not! However if WEB1 dies, WEB2 does take over connections all itself and works fine till WEB1 comes back online (requests go back to WEB1) and WEB2 starts to disconnect for the roughly 24 hours.
Anyone from the Microsoft Networking team able to shed any light on this? Please?

Maximum Nodes supported for NLB and Cluster in Windows Server 2008 Standard Edition ?

Hi.
I am looking for information How many nodes supported for NLB and Cluster in Windows Server 2008 Standard Edition ?
If you can provide for all the versions that would be great.
-Thanks
- Ajay Chanana

Hi,
You can configure a Windows server 2008 NLB cluster with up to 32 nodes. However,
scaling beyond 8 nodes will cause a slight performance hit because the network traffic is broadcasted to every node and only one NLB node accepts the connection.
For more detailed information, please refer to the link below:
FAQ Week for NLB: Tuesday
Best regards,
Susie

Enabling VM Guest NLB w/Multicast IGMP on 2012 Hyper-V host w/ converged SCVMM fabric switch

What a mouthful.
As short as possible:
WHAT I'M ATTEMPTING:
I'm trying to build a new NLB cluster for a 2008 R2 SP1 Remote Desktop Services farm. And I'm trying to do it the right way, with multicast igmp, not unicast.
The two guest VMs with NLB install converge fine. VIP gets this:
IP: 192.168.100.157
MAC: 01-00-5e-7f-64-9d
NLB NIC is on the same VLAN & "Converged switch" in VMM as our mgmt/server traffic (That is to say it's on production VLAN, not on a separate vlan)
PROBLEM:
Can't ping 100.157. From VM guest itself, from host, or from Cisco 6509 switch.
Cisco show mac address lookup does not see that MAC anywhere
show ip igmp groups shows not igmp traffic at all. Clearing counters show sno multicast increment.
FURTHERMORE:
Host is setup thusly:
- Dell R810
- 8x1GbE Broadcom 5709c in a Server 2012 LACP/HASH team built via VMM powershell cmdlets
- On the physical switch side, those 8 nics are in a Cisco port-channel, trunked, all VLANs allowed
- Host has no "physical" nics per se, as in a 2008 R2 hyper-v host. Instead Host has these:
Set-VMNetworkAdapter -ManagementOS -Name "Live Migrate" -MinimumBandwidthWeight 35
Set-VMNetworkAdapter -ManagementOS -Name "MGMT" -MinimumBandwidthWeight 25
Set-VMNetworkAdapter -ManagementOS -Name "CSV" -MinimumBandwidthWeight 40
Set-VMNetworkAdapter -ManagementOS -Name "iSCSI #1" -MinimumBandwidthWeight 0
Set-VMNetworkAdapter -ManagementOS -Name "iSCSI #2" -MinimumBandwidthWeight 0
Set-VMNetworkAdapter -ManagementOS -Name "Aux" -MinimumBandwidthWeight 0
Get-VMSwitch outputs this on the converged v-switch:
ComputerName : My-host
Name : My awesome switch
Id : e2377ce3-12b4-4243-9f51-e14a21f91844
Notes :
SwitchType : External
AllowManagementOS : True
NetAdapterInterfaceDescription : Microsoft Network Adapter Multiplexor
Driver
AvailableVMQueues : 0
NumberVmqAllocated : 0
IovEnabled : False
IovVirtualFunctionCount : 0
IovVirtualFunctionsInUse : 0
IovQueuePairCount : 0
IovQueuePairsInUse : 0
AvailableIPSecSA : 0
NumberIPSecSAAllocated : 0
BandwidthPercentage : 0
BandwidthReservationMode : Weight
DefaultFlowMinimumBandwidthAbsolute : 0
DefaultFlowMinimumBandwidthWeight : 1
Extensions : {Microsoft NDIS Capture, Microsoft
Windows Filtering Platform, Microsoft
VMM DHCPv4 Server Switch Extension}
IovSupport : False
IovSupportReasons : {This network adapter does not support
SR-IOV.}
IsDeleted : False
Question:
Aside from a few of my favorite MS MVPs (shout out to
WorkingHardInIt for having this same question), I can't find much documentation on employing 2008 R2 NLB on guest VM within a fabric-oriented, VMM-built 2012 Hyper-Visor converged switch (no network virtualization...yet).
Yes I know all about VMM NLB but 1) I'm trying to wedge NLB in after building these VMs without a service template (NLB is the audible, essentially) and 2) MS NLB is configured in providers & I've created requisite VIP templates.
Even so, I ought to be able to create an NLB cluster without VMM's assistance in this scenario correct? Suboptimal, I know but possible, yes? Essentially I've put to synthetic NICs on each VM, set IPs manually, and assigned them to the same vlan. I can ping
each synthetic NIC, but not the cluster IP.
And yes: these particular vNICs have Mac Address Spoofing enabled.
Cisco:
I have a TAC case open with Cisco, but they can't quite figure it out either. IGMP Snooping enabled across the switch. And they insist that the old static arp entry to resolve this problem is no longer necessary, that Microsoft now complies with relevant
RFCs
Possible SOlution:
Only thing I can think of is flipping MulticastForwarding param below from disabled to enabled. Anybody ever tried it on a converged virtual switch on the Hyper visor? Is my virtual converged switch protecting
me from multicast igmp packets?
PS C:\utilities> Get-NetIPv4Protocol
DefaultHopLimit : 128
NeighborCacheLimit(Entries) : 1024
RouteCacheLimit(Entries) : 128
ReassemblyLimit(Bytes) : 1560173184
IcmpRedirects : Enabled
SourceRoutingBehavior : DontForward
DhcpMediaSense : Enabled
MediaSenseEventLog : Disabled
IGMPLevel : All
IGMPVersion : Version3
MulticastForwarding : Disabled
GroupForwardedFragments : Disabled
RandomizeIdentifiers : Enabled
AddressMaskReply : Disabled
Thanks for any thoughts.
Robert

Sorry for the poor follow-up Steven. We are using Server 2012 Hyper-V, not VMWare, on the hosts. You can close this but for the benefit of anyone who comes across it:
After working with Cisco, we decided not to implement multicast IGMP. Cisco says you still need to create a static ARP entry on the physical switch, though my cluster IP address & Microsoft NLB 2008 R2 were set up with igmp multicast, not multicast or
unicast. Here was his email:
Yes, we will need the static mapping for the NLB server in this case because the NLB mac address is multicast and the IP address is unicast. I was under the impression that even the server would be using IGMP but that’s not
the case. We won’t need to do the mapping for the nodes though if they use IGMP. To this end, following is the configuration that should make this work.rp 192.168.100.157
0100.5e7f.649d arpa
<u5:p></u5:p>
mac address-table static 0000.0000.649d vlan <> interface <> disable-snooping
ßThis is the switch interface where the NLB server is located<u5:p></u5:p>
interface vlan<>
<u5:p></u5:p>
ip pim sparse-dense-mode <- This is needed for the switch to elicit IGMP joins from the nodes<u5:p></u5:p>
end<u5:p></u5:p>
I don't think it got through to him that there was a virtual Layer 2/3 Hyper-V switch on top of 8 teamed GbE interfaces in LACP/hash. "Where the NLB server is located" = 1)a Cisco port-channel bound to one of six physical hosts; the NLB VM itself could be
on any of those port channels at any given time (We have a six node Hyper-V cluster).
Once I enabled pim I did see activity; but we killed this later as we realized we'd have to implement the same on 40+ managed routers globally
Anyway we further would have had to implement this across managed routers at 40 sites globally according to Cisco.
Robert

AD RMS NLB Cluster

Similar Messages

Maybe you are looking for