RE: ISA/VPN NLB on Win2003

  • From: "David V. Dellanno" <ddellanno@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 27 Jun 2003 14:18:11 -0400

Oh man...my keyboard was shaking when I was repling back to that last
message.......lol

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Friday, June 27, 2003 2:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA/VPN NLB on Win2003


http://www.ISAserver.org


Hi David,

LOL! You're not in the deep end at all. My "attutide" (and there was a
definite attutide in that email) was towards the author of the doc
because it implied a real-time failover due to sharing connection state
table information between NLB array nodes. 

I'm happy you brought it up because it gave me a chance to vent :-)

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: David V. Dellanno [mailto:ddellanno@xxxxxxxxxx] 
Sent: Friday, June 27, 2003 1:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA/VPN NLB on Win2003


http://www.ISAserver.org


Hi Tom,
        
The article answered one of many questions that you have graciously
added multitude of questions to my list :-)  The one question I had was
the ability to perform NLB on which platform of WS03 (standard? Or
Enterprise?)  in which the answer was from that article - Enterprise. Oh
man, I have tons of questions but I hope I didn't get myself in the
deep-end with you Tom!   You have raise some serious questions that I
hope to answer soon!

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Friday, June 27, 2003 1:43 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA/VPN NLB on Win2003


http://www.ISAserver.org


Hi David,

I'm glad you brought that article up. But what does it really mean? From
that description, can you tell me what the problem is with using
L2TP/IPsec with NLB? 

Do you think this article implies that with Win2003, you get "stateful"
fail over? And if so, how do you define state? 

Do you think this article implies that when a member of the NLB array
(cluster reminds me of colon polyps, so I never use that term) fails,
the TCP state of the connection is completely known to other array
members and there is no interruption in service? 

Do you think that all array members are aware of the SAs established
between the VPN client and VPN server it initially connects to? 

Do you think that packets are evening distributed among all array
members from a single VPN client? (as this paragraph intimates). 

Or, do you think the author of this article
http://www.isaserver.org/articles/pptpnbpart1.html provided a hint as to
what the problem with L2TP/IPSec was with Win2k in the first paragraph
until the sectoin header Details of the Combined ISA/VPN Server Problem
, and if he weren't so lazy, he would have given you a link to
http://support.microsoft.com/?kbid=248346 which explains the problem
with the SAs and L2TP/IPSec :-)

And another thing, if I hear one more person mention the term "stateful"
without mentioning what they think it means, I'm going to bust a gut :-)

Have a great weekend!

Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp


-----Original Message-----
From: David V. Dellanno [mailto:ddellanno@xxxxxxxxxx] 
Sent: Friday, June 27, 2003 10:46 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA/VPN NLB on Win2003


http://www.ISAserver.org


Found my answer for WS03

Migrating from Windows NT Server 4.0 to Windows Server 2003

http://tinyurl.com/ffmi

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ddellanno@xxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message.


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ddellanno@xxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message.


Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of the 
intended recipient(s) and may contain confidential and privileged information. 
Any unauthorized review, use, disclosure or distribution is prohibited. If you 
are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.


Other related posts: