Two active active ISPs with load balancing, publishing and VPN connection

Hi,
I wonder how to enable a scenario where i have to use two ISP's to share 30/70 load on our internet traffic, have to configure almost 60 internal websites already published using microsoft TMG firewall and connect client VPN connections and site-to-site vpn connections. I know that ASA firewall has limitation when using security contexts. Is good idea that how to achieve this gool?
I previously tried connecting four sites running ASA devices with this fifth site running Microsoft TMG firewall but i was able to connect only two ASA firewalls using site-to-site VPN, though I was able to connect remaining two as well but last two were not able to access ASA-TMG resources. furthermore behavious of two ASA-TMG connected sites was strange: sometime i was not able to access cross site resources from one machine but was able to do so from another machine.
I noticed that two of ASA sites connected with TMG site has different internal IP class (e.g site one 192.168.0.* and site two using 172.16.*.*) while remaining two have same class like the first site e.g 192.168.128.* and 192.168.100.*
Did anyone has experiance connecting TMG-ASA with multiple sites within same IP class scenario?
OR
How to enable same features using Cisco devices as they are on a single Microsoft TMG?
Best,
Saulat (Contact# 0092-321-4025587)

Sulat,
You can load balance between the two ISPs. That is not possible. But, we do have some options that I have discussed here:
Hope the above link gives you some ideas to utilize both your ISP links.
-Kureli

Similar Messages

Help: AM Agent working with load balancing AM Server

Hi,
We are trying to set up the policy agent to work with two AM Servers behind a load balancer.
The agent deployment document said that in the AMAgent.properties we must set
com.sun.am.loadBalancer_enable=true
According to the AM deployment guide(http://docs.sun.com/source/817-7644/appE_loadbalancerconfig.html),
we also set in the AMConfig.properties something like
com.iplanet.am.lbcookie.name=server1
com.iplanet.am.lbcookie.value=server1
The loading balancing just does not work. Can anyone explain how AM agent works under such an deployment
environment? Some people say the agent can find the real server using the naming service, but the not
much explanation can be found.
More info on our two machines:
The two AM servers are named server1.domain and server2.domain. The virtual LB name is server.domain.
The two AM servers were installed using the host name server.domain. We added the servers' real name
in the AM's fqdnMap. At the agent config file, the name service is pointing to the LB.
Really appreciated any advices.
Regards,
Henry

Thanks for your reply.
We figured it out lately thanks to help from Bernhard.
1) use each machine's name to install the AM servers using the same LDAP server.
2) In AmAgent.propeties, set com.sun.am.loadBalancer_enable=true
3) In AM server platform, add in all machine's names
4) In Organization alias, add in two machines' name
5) In fqdnMap, add in load balancer's name
6) In LB, set cookie stickiness based on cookie JSESSIONID

BM clustering with load balancing

I want to implement BM clustering with load balancing according to AppNote written by Steve Aitken from March 25, 2005.
It's clear that I need to use two private addresses (from the example, these are 10.10.10.10 and 10.10.10.11). However, I'm not sure what are IP addresses 10.10.10.1 and 10.10.10.2 used for?
Existing BM servers have two NICs: first defined as private and the second as public addresses connected directly to Internet (they are from different subnets).
Sinisa

Originally Posted by phxazcraig
In article <[email protected]>, Tnelson 2000
wrote:
> I've set this up per the appnote and aren't able to get out through any
> of the ip addresses. I get a 504 Gateway Time out error. I also noticed
> that the cluster master ip address is different, 10.10.10.12, for
> example. Do you know what I need to look at to verify I have this
> configured correctly?
>
What do you mean "aren't able to get out through any of the ip
addresses"?
Do the addresses show up in any of the proxy nodes with display secondary
ipaddress? Does the proxy console option 17 show the server listening on
those addresses?
Is the gateway timeout error a BorderManager (or Windows) error? If
BMgr, then check that BMgr has a correct default gateway, DNS is working
(option 4 on proxy console screen) and try dropping filters for a test.
Craig Johnson
Novell Knowledge Partner
*** For a current patch list, tips, handy files and books on
BorderManager, go to Craig Johnson Consulting - BorderManager, NetWare, and More ***
Got it working. I noticed that my dns setting in BM2 didn't coincide with settings in BM1. So, I made them the same and reinitialized the system on both servers. Of course, when I did that, it added the secondary IP addresses. So, I'm really not sure what was stopping it from working before, unless I have something misconfigured that's preventing the secondary addresses from loading. Go figure.

Error in creation of JCO with Load balancing server

Hi,
We are using a ABAP user base for our WEBAS server 6.40 (with ABAP+JAVA). i have created a Public group in concerned ECC 5.0 system. I have already configured SLD, and then i maintain data supplier bridge in SLD and run RZ70 in ECC 5.0 system to load system information.. i can see details in SLD ..
now i am trying to create JCO connections .. here i am unable to create JCO with load balancing option.. i get
com.sap.mw.jco.JCO$Exception: (102) RFC_ERROR_COMMUNICATION: Connect to message server host failed Connect_PM TYPE=B MSHOST=<servername> GROUP=PUBLIC R3NAME=SID MSSERV=sapms<SID> PCS=1 ERROR service 'sapms<SID>' unknown TIME Fri Jun 16 12:41:20 2006 RELEASE 640 COMPONENT NI (network interface) VERSION 37 RC -3 MODULE ninti.c LINE 505 DETAIL NiPGetServByName2: service 'sapms<SID>' not found SYSTEM CALL getservbyname_r COUNTER 1
i am able to create single server JCO, but it fails in load balancing.. is there anything i have missed out in settings...
Thanks and regards,
Sudhir

Thanks, Bogdan Rokosa
I have the same problem,and solved it following the steps provided by Bogdan Rokosa :
you must insert an entry for your R3 system
(like: sapms<SID> 3600/tcp)
in services file
(C:\WINDOWS\system32\drivers\etc\services) on Java WAS.
I test the Jco successful without restart J2EE Engine.

Trouble in a SAP system with load balancing

Hello masters:
I had a trouble with workitems that came from a SAP system with load balancing. They doesn't receive the workitem ID in the UWL.
I created another system in the portal as a "dedicated application server", and made the necessary configuration in order to replace the first one, and then my workitems worked fine.
However, I would like to know what appened with the first system created as "system with load balancing". Why this system didn´t pass the workitem ID to the application (web dynpro abap) that execute the workitems?
Thank you.

I hope there was some missing configuration in the first case which was not replicating the workitem from SAP Inbox to UWL.
Thanks
Arghadip

System with load balancing server

Hi All,
We are having SAP NW 7.0 Portal and back end we have R3 implemented in a cluster environment. The system object in EP have used "System with Load balancing" template; using the LOGON group and the other related parameters.
But we have some problem with the ITS and WAS parameters; since we are using some Transaction iViews.
Let me explain.. for the R3 cluster we have 2 systems PROD1.domain.ext and PROD2.domain.ext. Now in the system object in portal, how to specify the parameters for ITS and WAS parameters? Since the host name in these we need to specify a single server which defeats the basic purpose of having clustered environment.
Can any one please help in resolving this issue.
Thanks,
Sravanthi

Hi Sravanthi,
Please check the below for finding ITS and WAS parameters from backend :
For ITS - Go to SE37 >> Utilities >> Setting >> Click on ICON Right Top Corner in popup window >> Select Internet Transaction Server >> you will find the Standard Path and HTTP URL.
For WAS - Go to SE37 >> Run FM - RSBB_URL_PREFIX_GET >> Execute it >> you will find PRefix and PAth paramter for WAS.
Please refer to this may help step-by-step : How-to create a portal system for using it in Visual Composer
Hope it helps
Regards
Arun

HTTPS with load balancing

Hi guys,
We have a portal system with instance 08, so we typically connect to the portal using port 50800 for HTTP, and 50801 for HTTPS.
We have just created a second server node for this portal (in the config tool).
When we connect to 50800, does this automatically load balance the user to the better server? From some reading on these forums, it seemed to indicate that load balancing will only occur if I connect using port 8109. (where 09 is the instance number for the SCS of our portal)
When connecting to port 8109, we are redirected to port 50800, as I'd expect.
Question 1 - do we need to use 8109 for load balancing, or can we still use 50800?
Question 2 - If we need to use 8109, which is a HTTP port, how can we achieve load balancing with HTTPS. Is there a different port we need to use to have HTTPS with load balancing?
Question 3 - Is the creation of a second server node the best way to accomodate additional users and load on the portal system, or is there a better way to do things?
Thanks,
Michael.

Better late than never.
The load balancing you describe through the message server has its limitation. It redirects you to one of the dialog server hosts which means that any bookmarks will always point directly to a dialog server which may be down at that moment.
Access directly to a dialog server on port 50800 will sort of load balanc on the java server instances that are on that server but not on other servers.
The general recommendation is to setup an external loadbalancer and SAP Web dispatcher is a good match if the load is not very high. SAP webdispatcher will then bind up the cluster address and act as a proxy towards the dialog servers of the portal. The user will therefore only see one address. This will also work for HTTPS.
Regards
Dagfinn

Moving SMTP server to Azure with Load balancer

How to
move SMTP server to Azure with Load balancer???

Hi TechM,
Base on my experience, Windows Azure Platform does not provide out-of-the-box mail server (neither SMTP nor POP3). You could use SendGrid to sent mail. About this issue, I recommend you could refer to
http://stackoverflow.com/questions/10631585/email-sending-approaches and
http://blogs.msdn.com/b/patrick_butler_monterde/archive/2010/10/11/sending-e-mail-from-windows-azure-part-1-of-2.aspx
Hope it helps.
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

OCS on a cluster with Load balancing and fail safe environment

Dear all,
i want to ask is there any documat or hints on how to do an OCS R2 installaiotn on 3 server with RAC option (clustered Fail Safe), how can i install OCS on a cluster with Load balancing and fail safe environment.
plz i need ur help
thanking u
[email protected]

Dear all,
i want to ask is there any documat or hints on how to do an OCS R2 installaiotn on 3 server with RAC option (clustered Fail Safe), how can i install OCS on a cluster with Load balancing and fail safe environment.
plz i need ur help
thanking u
[email protected]

How to configure R/3 System with Load Balancing?

Hello,
I've created a Web DynPro Application and I would like to case an iView on it. According to SAP tutorials I first need to configure an R/3 System with Load Balancing.
My problem is how to configure the "WAS Host Name".
According to the tutorial:
WAS Host Name = <host>.<domain>:port (this corresponds to the Web Dynpro server location and the port on which it is running eg. PXYZ.wdf.sap.corp:50000.)
I am using NW 04 and my portal is running on this address:
http://ep6sp9test:50000/irj/portal
When I set the WAS Host Name to ep6sp9test:50000 the Test connection fails (I have privildges and created an alias and User mapping). What should I put at this field then?

Hi
I think you have to specify the HTTP port og the WAS running the R/3 system. The 50000 port is the HTTP port of your portal - not the R/3 system. You can see the HTTP port of the R/3 system using transactioncode SMICM - services in the R/3 system.
BR
Tom

Recommended configuration for load balanced Portal with load balancer, multiple gateways and multiple servers.

Does anyone have a recommended network, hardware and software configuration guide for a Portal installation running with multiple gateways load balanced (ie one URL) that talk to multiple servers?

David,
We've used Resonate (software) to load balance the gateways. It allows
you to group all the gateways under 1 virtual URL and load balance the
incoming connections over each gateway depending on the rules that you
define in Resonate. Look in the SUN portal whitepapers there is one that
talks about it specifically.
As far as load balancing the calls to the portals, the gateways will
automatically load balance across all the portals that they know about
using a simple round-robin rotation. You may be able to use Resonate in
front of the portals but you may need to activate persistance within
Resonate to ensure that the user always ends up on the portal that he
established his initial connection on (if you want that), check with Sun
on this one.
David Broeren wrote:
Recommended configuration for load balanced Portal with load balancer,
multiple gateways and multiple servers.
Does anyone have a recommended network, hardware and software
configuration guide for a Portal installation running with multiple
gateways load balanced (ie one URL) that talk to multiple servers?
Try our New Web Based Forum at http://softwareforum.sun.com
Includes Access to our Product Knowledge Base!

Problem with load balancing on ACE 4710

Hello.
I'm setting ACE4710.
I'm using DSR (Direct server return).
The load balancing cannot be distributed now.
I append the network configuration.
Could someone please help out?
THANKS!

Hello.
My problem has not been to have load balancing to rserver.
Connection is http://192.168.11.100:9080/ → ＮＧ（Connection error)
Connection is http://192.168.11.101:9080/ → ＯＫ（rserver1)
Connection is http://192.168.11.102:9080/ → ＯＫ（rserver2)
Even if "predictor ROUNDROBIN" is changed, it is the same.
Why cannot load balancing be done?
It is displayed that State is OPERATIONAL as a result of doing 'show rserver'.
Is this a correct display?

ACE Load Balance setup and testing - vip

Got a new ACE 4710 and am I new to the appliance. I am testing out a senario with load balancing between two servers. In testing when I ping the VIP ip address the replies I see are from the real server ip addresses. I am just wondering if this is the correct normal behavior or should I see the ping replies coming from the VIP ip address?
Thanks

Do you use the
    loadbalance vip icmp-reply active
command?
policy-map multi-match POL45
class VStest
    loadbalance vip inservice
    loadbalance policy L7SLBPOLtest
    loadbalance vip icmp-reply active

LOAD BALANCE (CSS) and Portal Port Number based on Instance Number

Hi,
My doubt is about LOAD BALANCE (CSS) and Portal Port Number based on Instance Number.
I have to install 3 servers machines and 2 servers databases cluster. There will be a HIGH AVAILABILITY environment. There will be a MIGRATION and UPGRADE.
Today there are 2 servers machines in Windows NLB. Today my production Portal is 6 6.20.
Once, I did something for LABORATORY TEST. Migration (6 6.40) and Upgrade (7.0)in two other machines. But they were with Windows NLB. When I did the installation, for each server machine and during the instalation I had to give one Instance Number for each and in result there was a different Port Number for each.
But I accessed both machines throught a virtual url(dns) with a specific port number. And it works!
NOW, with a HARDWARE LOAD BALANCE _ CSS I don't know how to do.
A guy who works with it tell us that couldn't redirect one Port Number for different port numbers. He couldn't configure the CSS like this.
My question is: Is he write? And if he is, there is a way to give the same instance number for my 3 new Portal servers machines? Example: 5(02)00.
Could you understand?
I need help.
Regards,
cheers,
Nivia

Nivia,
I have used F5 for load balancing, I am sure you can do the same with CSS. Yes, you can configure a virtual IP on the load balancer with standard ports (80 or 443) and load balancing the traffic to multiple servers with different ports. You can have different ports for each instance.
-Regards
RK

Load balancing error 88: Cannot connect to message server (rc=9)

Hi,
We are facing a problem in the system object.
initially we created a system object with loadbalancing template ,and everything worked fine, but after couple of months we found a error "Load balancing error 88: Cannot connect to message server (rc=9)", so we have created a Dedicated application server object which resolved our issue.
My question is why has this problem occured, and since my client side has lot number of users and we wish to keep the system back to load balancing object.
How can i make my system object work back, what might be the causes?
Thanks
Srivastsa Kondapally

Load balancing only works if the message server is available and the logon group specified exists as well. If one of those changes, then it will break until you get the values set correctly.

Two active active ISPs with load balancing, publishing and VPN connection

Similar Messages

Maybe you are looking for