Solved

Virtual 2008 R2 dropping RDP connections

Posted on 2012-04-01
8
1,862 Views
Last Modified: 2016-11-23
Hi
Am running Hyper-V 2008 R2 with all Windows updates on Dell T610 with Dual broadcom NICs.
Guests
SBS 2011 with 32 GB RAM
2008 R2 (from premium licence) with RDS Role
I've activated the RDS User cals on the RDS Server and can RDP into the machine intermittently. The trouble is the RDS server intermittently is dropping the connections. Either from a machine on the same LAN segment or from the virtualized SBS 2011 I try to open an RDP connection and receive the error the computer was not contactable.
This is confirmed when I telnet 192.168.1.10 3389.  The attempt fails, if I wait 5 or 10 seconds and try the telnet again the screen goes black indicating a connection. If I then switch back to RD client and retry the connection the RDP session opens as it should.
I've seen a few blogs about disabling Large Sending Offload and have used the below article to install the broadcom management software to disable LSO both NICS on the Hyper-V Host. I have also disabled the LSO on the NIC properties on the RDS VM
http://mrshannon.wordpress.com/2010/01/13/jumbo-frames-on-hyper-v-server/
I'm running latest drivers from the Dell website
I'm still getting the issue.
Hope someone can help as I've pulled most of my hair out.
Thanks
0
Comment
Question by:Amiga-2000
  • 4
  • 2
  • 2
8 Comments
 
LVL 5

Accepted Solution

by:
mbkitmgr earned 500 total points
ID: 37794829
Back to basics - have you pinged the def GW with the -t switch to see that there arent any LAN problems?  What does it respond with.

1. ping the default gw for 5 mins and redirect the result to a text file
               (ping 192.168.0.1 -t ">c:\pingdefgw.txt)
2. Ping between VM Guests for 5mins
              (ping 192.168.0.2 -t ">c:\pingSBStow2K8.txt)
              (ping 192.168.0.2 -t ">c:\pingW2K8toSBS.txt)
3. See what they are seeing in the text files.  you may have to run them longer to match any timeframe that it takes for this to appear

If RDS and Telnet are affected its a good bet that communication should be the culprit
0
 

Author Comment

by:Amiga-2000
ID: 37794971
It seemed as though another machine was coming online with the Same ip. DOH !!! My servers are outside the DHCP scope but even so it was disrupting things. Didn't get any duplicate IP address's errors though but when I shut the VM off and the IP was responding to ping I smelt a rat :)

Man the things I've been through, TOE, offloading, chimney, RSS, and it looks like a damn duplicate IP

Didn't actually see your resposne till now but will accept and leave this to heopfully save another poor sap the agony

Thx
0
 
LVL 30

Expert Comment

by:IanTh
ID: 37794985
you are aware rdp has been compromised ?
0
 
LVL 5

Expert Comment

by:mbkitmgr
ID: 37795627
Amiga-2000 just glad to hear its fixed - I know how it feels - had an entire site down inlcuding a  VMWARE HA cluster, Wifi, Desktops, printers, nurse call system - nothing worked.  What was it??? A user had plugged a cable they found into a wall socket - creating a massive loop.  it took 4 1/2 hrs to find.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Amiga-2000
ID: 37798751
LOL - gotta love a user plugging in a spare cable.
Cheers
0
 

Author Comment

by:Amiga-2000
ID: 37798753
@IanTh - what do you mean compromised?
0
 

Author Comment

by:Amiga-2000
ID: 37809063
I'll close this one. I assume IanTh was refering to last months RDP vulnerability but all server are patched so this was nothing to do with the issue. Thank mbkitmgr
0
 
LVL 30

Expert Comment

by:IanTh
ID: 37809988
yes ms12-020 was meant to fix it but it didnt its a kb now
see
http://technet.microsoft.com/en-gb/security/bulletin/ms12-020
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now