asked on

Forefront TMG enterprise standalone Array configuration with NLB Multicast.

Hi,

We are trying to configure two forefront TMG in standalone Array, with NLB. Our first configuration was in unicast NLB, but our main switch was flooded with broadcast traffic. We want to configure the array in multicast NLB, but we are unsure, about the configuration requiered in the switch, to support this setup. The switch is a Netgear GSM7248-200 4 slots ( http://www.netgear.com/Products/Switches/FullyManaged10_100_1000Switches/GSM7224-200.aspx )

This is our first experience with NLB

Thanks,

Oliver

pwindell

When I tried it in a Lab it "just worked",...never touched the switches.

Here's the material I used. There was other material, but this is the bulk of it and the most useful I found:

Me, Myself and ISA Blog (MSFirewall.org.uk): ISA Server 2006/2004 Configuration Storage Server Frequently Asked Questions
http://blog.msfirewall.org.uk/2009/04/isa-server-20062004-configuration.html

Me, Myself and ISA Blog (MSFirewall.org.uk): Resource Guide for Using Microsoft NLB with ISA Server 2006 Enterprise Edition
http://blog.msfirewall.org.uk/2008/10/resource-guide-for-using-microsoft-nlb.html

CDINFO

ASKER

When you tried it, you just configured ISA to work with what kind of packets? Unicast? Multicast? IGMP? You no longer had broadcast on the network without doing anything to the switch itself? That's a bit unusual IMO :| Keep us informed, we tried a few thing last thursday night but had no success at all.

pwindell

I left it at the Defaults,...which I believe is Multi-cast. Again that materiel I gave links to make all that clear.

CDINFO

ASKER

Both articles have been read a few weeks ago. Basically, we are having a hard time to figure out "How to configure the 7248" for setting the IGMP settings. Enaabling Multicast only while configuring TMG works like a charm *but*, it involves switch flooding.

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

pwindell

A static arp would mean the switch "knows" the MAC of each physical interface,...the whole point is that it is not supposed to know the MAC.

It's the virtual interfaces that must have static arp, which is very well explained in the document.

pwindell

I don't think that is what has to be done. I don't remember anything I ever read telling me to create a Static Arp on a switch when creating an ISA/TMG NLB Array.

I guess you never installed ISA/TMG with NLB multicast mode in a Cisco environment.

Please try reading the multicast section of the Cisco whitepaper :-)

And I can tell you for sure that the setting is necessary if the switch doesn't add multicast MACs to the arp table runtime. Cisco or not.

pwindell

Alright,..multicast MAC,...that makes more sense.