• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1641
  • Last Modified:

Static ARP entry for NLB cluster when the clustered servers are Hyper-V virtual machines

I've found a lot of documentation about setting up static ARP entries on Cisco gear when you need to allow access to a Windows NLB cluster.  

Does anyone know how to set that up when the clustered machines are virtual machines?
0
Aaron_Denton
Asked:
Aaron_Denton
  • 3
  • 3
2 Solutions
 
kevinhsiehCommented:
When I use NLB for my Windows 2008 R2 VMs under Hyper-V, I don't set static ARP entries. I have two synthetic NICs on the VMs; 1 for VM communication and the other the handling traffic to the cluster. I use NLB in unicast mode. You will need to enable MAC spoofing for the VM in Hyper-V or the cluster won't converge.

http://robwhitehouse.com/virtualisation/enable-nlb-in-a-hyper-v-guest/
0
 
Aaron_DentonAuthor Commented:
kevinhsieah

thanks for the response.  I created my NLB in unicast mode. When i checked the MAC address it was already set to Static and each node had the correct MAC address.

That seems to be working.  I'm able to make connections from my internal network.

However; when I try to access through my Cisco firewall i'm unable to connect.

Should I add a static ARP entry to the Cisco box?
0
 
eeRootCommented:
It isn't that different with VM's.  You may want to consider which switch(es) get the static ARP entry.  You may need to set the static ARP enrty on each switch that the virtual host servers connect to, or just once on a core switch that is above all the switches that the virtual servers connect to.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
kevinhsiehCommented:
You can check that ARP entry value on your firewall, but I doubt that is the problem. I use dynamic MAC addresses and I don't do anything special on my ASA firewall. I just do the standard static NAT for the cluster IP address and access list rules.
0
 
Aaron_DentonAuthor Commented:
thanks for the responses guys! I'll try adding the static ARP on the switches that would carry that traffic sometime this week.
0
 
kevinhsiehCommented:
FYI, I don't put static ARP entries on my switches, routers, firewalls, or VMs. Works fine for me.
0
 
Aaron_DentonAuthor Commented:
thanks guys for the help. I got this working without any static ARP.
I believe I just needed to use unicast mode.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now