We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Static ARP entry for NLB cluster when the clustered servers are Hyper-V virtual machines

Aaron_Denton
Aaron_Denton asked
on
Medium Priority
1,769 Views
Last Modified: 2012-08-14
I've found a lot of documentation about setting up static ARP entries on Cisco gear when you need to allow access to a Windows NLB cluster.  

Does anyone know how to set that up when the clustered machines are virtual machines?
Comment
Watch Question

kevinhsiehNetwork Engineer
CERTIFIED EXPERT

Commented:
When I use NLB for my Windows 2008 R2 VMs under Hyper-V, I don't set static ARP entries. I have two synthetic NICs on the VMs; 1 for VM communication and the other the handling traffic to the cluster. I use NLB in unicast mode. You will need to enable MAC spoofing for the VM in Hyper-V or the cluster won't converge.

http://robwhitehouse.com/virtualisation/enable-nlb-in-a-hyper-v-guest/

Author

Commented:
kevinhsieah

thanks for the response.  I created my NLB in unicast mode. When i checked the MAC address it was already set to Static and each node had the correct MAC address.

That seems to be working.  I'm able to make connections from my internal network.

However; when I try to access through my Cisco firewall i'm unable to connect.

Should I add a static ARP entry to the Cisco box?
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
kevinhsiehNetwork Engineer
CERTIFIED EXPERT

Commented:
You can check that ARP entry value on your firewall, but I doubt that is the problem. I use dynamic MAC addresses and I don't do anything special on my ASA firewall. I just do the standard static NAT for the cluster IP address and access list rules.

Author

Commented:
thanks for the responses guys! I'll try adding the static ARP on the switches that would carry that traffic sometime this week.
Network Engineer
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
thanks guys for the help. I got this working without any static ARP.
I believe I just needed to use unicast mode.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.