Forefront TMG enterprise standalone Array configuration with NLB Multicast.

Hi,

We are trying to configure two forefront TMG in standalone Array, with NLB. Our first configuration was in unicast NLB, but our main switch was flooded with broadcast traffic. We want to configure the array in multicast NLB, but we are unsure, about the configuration requiered in the switch, to support this setup. The switch is a Netgear GSM7248-200 4 slots ( http://www.netgear.com/Products/Switches/FullyManaged10_100_1000Switches/GSM7224-200.aspx )

This is our first experience with NLB

Thanks,

Oliver
CDINFOAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

pwindellCommented:
When I tried it in a Lab it "just worked",...never touched the switches.

Here's the material I used.  There was other material, but this is the bulk of it and the most useful I found:

Me, Myself and ISA Blog (MSFirewall.org.uk): ISA Server 2006/2004 Configuration Storage Server Frequently Asked Questions
http://blog.msfirewall.org.uk/2009/04/isa-server-20062004-configuration.html

Me, Myself and ISA Blog (MSFirewall.org.uk): Resource Guide for Using Microsoft NLB with ISA Server 2006 Enterprise Edition
http://blog.msfirewall.org.uk/2008/10/resource-guide-for-using-microsoft-nlb.html
0
CDINFOAuthor Commented:
When you tried it, you just configured ISA to work with what kind of packets? Unicast? Multicast? IGMP? You no longer had broadcast on the network without doing anything to the switch itself? That's a bit unusual IMO :| Keep us informed, we tried a few thing last thursday night but had no success at all.
0
pwindellCommented:
I left it at the Defaults,...which I believe is Multi-cast.   Again that materiel I gave links to make all that clear.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

CDINFOAuthor Commented:
Both articles have been read a few weeks ago. Basically, we are having a hard time to figure out "How to configure the 7248" for setting the IGMP settings. Enaabling Multicast only while configuring TMG works like a charm *but*, it involves switch flooding.
0
otCommented:
With multicast, to avoid flooding you must add static arp to the switch pointing at the interfaces for the NLB hosts.

Can't tell about the Netgear, but for Cisco there is a whitepaper explaining the problem and configuration examples.

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080a07203.shtml#mm

Ole Thomsen
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pwindellCommented:
A static arp would mean the switch "knows" the MAC of each physical interface,...the whole point is that it is not supposed to know the MAC.  
0
otCommented:
It's the virtual interfaces that must have static arp, which is very well explained in the document.
0
pwindellCommented:
I don't think that is what has to be done.  I don't remember anything I ever read telling me to create a Static Arp on a switch when creating an ISA/TMG  NLB Array.  
0
otCommented:
I guess you never installed ISA/TMG with NLB multicast mode in a Cisco environment.

Please try reading the multicast section of the Cisco whitepaper :-)

And I can tell you for sure that the setting is necessary if the switch doesn't add multicast MACs to the arp table runtime. Cisco or not.
0
pwindellCommented:
Alright,..multicast MAC,...that makes more sense.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.