[isalist] Re: NLB with ISA 2k6 project...

  • From: "D PIETRUSZKA USWRN INTERLINK INFRA ASST MGR" <DPietruszka@xxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 22 Oct 2007 14:20:52 -0400

http://www.ISAserver.org
-------------------------------------------------------

For most of our services we use Big-IP from F5.

Regards
Diego R. Pietruszka
MSC (USA) - Interlink Transport Technologies

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Paul Laudenslager
Sent: Monday, October 22, 2007 12:35 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...

http://www.ISAserver.org
-------------------------------------------------------
  
-> in case the failure come from the provider, most of the services will
point to another location
How are you accomplishing this?... pointing traffic to a different location?

-> The funny part is, even with all that in place, we had some down times
;-)
Too funny.  I can relate to this... :)

Thank you so very kindly.
-Paul

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA ASST MGR
Sent: Monday, October 22, 2007 11:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...

http://www.ISAserver.org
-------------------------------------------------------
  
We have a similar scenario here.
We have two connections but from the same provider (in case the failure come
from the provider, most of the services will point to another location, some
are not possible but...), in case one of them stop working or even the
router where is connected stop working the other line or router will start
doing the job.
On each location we have 3 arrays of ISA, doing different task (proxy, VPN,
publishing sites, etc), each array has 2 servers working with NLB but
unfortunately with no teaming on the boxes :-(

Since we have multiple locations, there are some sort of redundancy between
locations as well, but probably that is another story.

The funny part is, even with all that in place, we had some down times ;-)

Regards
Diego R. Pietruszka
MSC (USA) - Interlink Transport Technologies

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, October 22, 2007 11:39 AM
To: isalist@xxxxxxxxxxxxx
Cc: support-team@xxxxxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...

http://www.ISAserver.org
-------------------------------------------------------
  
He said "Cisco"...
Heh-heh..heh-heh..heh-heh


ISA can't (yet) use multiple public connections where they both serve the
whole Internet.
You'll have to use teaming (without NLB) to make sure the path is
auto-switched to another connection on the same subnet.
If the ISP connections use separate subnets, you'll have to defer to an
external device for the time being.
The archives hold many opinions on that question.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Laudenslager
Sent: Monday, October 22, 2007 8:26 AM
To: isalist@xxxxxxxxxxxxx
Cc: support-team@xxxxxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...

http://www.ISAserver.org
-------------------------------------------------------

Really the only goal here with the project is for hardware redundancy - in
case we have a complete server failure, I'd like to have another machine
keeps things running.  Right now, with all the redundancy on the servers
(raid, multiple power supplies, etc.), the actual firewall server itself was
our next single point of failure.

I've got (3) T1's combined from a single provider at this location combined
into a single router.  What's the best way to plan for circuit or router
failure?  I've got an extra Cisco router but was thinking of ordering a
circuit from a different provider.  What's your thoughts on this?

Thanks again for time and consideration.  This group has been invaluable in
helping our company for many years now.  Thanks to everyone on this list!
-Paul



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, October 22, 2007 10:58 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...

http://www.ISAserver.org
-------------------------------------------------------

A1 - almost correct; you *can* install (IOW, it's possible to do so) NLB on
ISA 2004+ Std Ed, but if you have to call CSS for help, they'll ask you to
remove it.  It's only supported on ISA 2004+ Ent Ed.
A2 - Std Ed works just fine
A3 - That's a perfectly fine tutorial.  You also have TechNet available to
you;
http://www.microsoft.com/technet/isa/2006/nlb.mspx

The big question to answer is "what specific benefits do you expect to gain
by adding NLB to your ISA deployment?

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Laudenslager
Sent: Monday, October 22, 2007 7:48 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] NLB with ISA 2k6 project...

I'm about to play with my first NLB project and have a couple newbie
questions...



1)      I assume that ISA 2k6 ENTERPRISE edition is needed.  Is this true?
ISA 2k6 Standard doesn't do NLB?

2)      I'm going to be using Server 2k3 or 2k3R2.  Is Enterprise or Data
Center edition needed for that as well or can I get away with Standard
edition of Server?

3)      Are there any 2k6 NLB tutorials out there... I found and printed out
the ISA 2k4 NLB tutorial at



http://www.isaserver.org/tutorials/Installing-Configuring-ISA-Server-2004-En
terprise-Edition-Part2.html



Thanks in advance for your time and consideration.



-Paul

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx




------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 




------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: