[isalist] Re: NLB with ISA 2k6 project...
- From: "Paul Laudenslager" <paul@xxxxxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 24 Oct 2007 15:34:17 -0400
http://www.ISAserver.org
-------------------------------------------------------
Hi Bruce,
I got a lot out of your reply. I really do appreciate your time and
efforts. I'm actually going through the same thing right now.
I've never used a failover device such as the PowerLink Pro. Seems like a
pretty cool device. I was actually considering going the BGP route and
obtaining some IP's from ARIN. This would allow me easier portability as
far as moving equipment.
Wow, it's good to hear from a Lautenschlager. <grin> Have you got an email
I can send to off the list?
Your friend in Virginia,
Paul Laudenslager
paul@xxxxxxxxxxxxxxxx
540-854-5450
Virginia Internet Services Support Team
http://www.virginiainternetservices.com
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Bruce Lautenschlager
Sent: Wednesday, October 24, 2007 11:35 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
Ahh, single points of failure...the things that keep me up at night.
ISA 2006 EE array - two servers (Windows Server 2003 Standard R2) using ISA
integrated NLB. 4 WAN circuits (2 T1s, 2 DSL, different vendors, as much as
possible - but almost all T1s still ride on BellSouth/ATT local loop, in my
case). They are connected to a PowerLink Pro 100, which supports clustering
(my second one is on order - not installed yet).
I've downed ISA servers one at a time without a real outage (obviously it
takes a few seconds for someone to switch over). I've unplugged WAN circuits
without a real outage (again - it takes a second or two to fail over). When
I get my second PowerLink, I'll let you know how quickly that fails over.
Now if the idiots working in the street outside our main data center dig in
the wrong place, it's all a moot point. But I'm working on putting a single
WAN circuit at one of our remote facilities that we already have dual 100Mb
microwave links, too, and I figure I could fall back to that for at least
some service.
Bruce Lautenschlager
P.S.
Quit spelling your name wrong.
----- Original Message -----
From: "Paul Laudenslager" <paul@xxxxxxxxxxxxxxxx>
To: <isalist@xxxxxxxxxxxxx>
Sent: Monday, October 22, 2007 12:34 PM
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
-> in case the failure come from the provider, most of the services will
point to another location
How are you accomplishing this?... pointing traffic to a different location?
-> The funny part is, even with all that in place, we had some down times
;-)
Too funny. I can relate to this... :)
Thank you so very kindly.
-Paul
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA ASST MGR
Sent: Monday, October 22, 2007 11:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
We have a similar scenario here.
We have two connections but from the same provider (in case the failure come
from the provider, most of the services will point to another location, some
are not possible but...), in case one of them stop working or even the
router where is connected stop working the other line or router will start
doing the job.
On each location we have 3 arrays of ISA, doing different task (proxy, VPN,
publishing sites, etc), each array has 2 servers working with NLB but
unfortunately with no teaming on the boxes :-(
Since we have multiple locations, there are some sort of redundancy between
locations as well, but probably that is another story.
The funny part is, even with all that in place, we had some down times ;-)
Regards
Diego R. Pietruszka
MSC (USA) - Interlink Transport Technologies
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, October 22, 2007 11:39 AM
To: isalist@xxxxxxxxxxxxx
Cc: support-team@xxxxxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
He said "Cisco"...
Heh-heh..heh-heh..heh-heh
ISA can't (yet) use multiple public connections where they both serve the
whole Internet.
You'll have to use teaming (without NLB) to make sure the path is
auto-switched to another connection on the same subnet.
If the ISP connections use separate subnets, you'll have to defer to an
external device for the time being.
The archives hold many opinions on that question.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Laudenslager
Sent: Monday, October 22, 2007 8:26 AM
To: isalist@xxxxxxxxxxxxx
Cc: support-team@xxxxxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
Really the only goal here with the project is for hardware redundancy - in
case we have a complete server failure, I'd like to have another machine
keeps things running. Right now, with all the redundancy on the servers
(raid, multiple power supplies, etc.), the actual firewall server itself was
our next single point of failure.
I've got (3) T1's combined from a single provider at this location combined
into a single router. What's the best way to plan for circuit or router
failure? I've got an extra Cisco router but was thinking of ordering a
circuit from a different provider. What's your thoughts on this?
Thanks again for time and consideration. This group has been invaluable in
helping our company for many years now. Thanks to everyone on this list!
-Paul
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, October 22, 2007 10:58 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NLB with ISA 2k6 project...
http://www.ISAserver.org
-------------------------------------------------------
A1 - almost correct; you *can* install (IOW, it's possible to do so) NLB on
ISA 2004+ Std Ed, but if you have to call CSS for help, they'll ask you to
remove it. It's only supported on ISA 2004+ Ent Ed.
A2 - Std Ed works just fine
A3 - That's a perfectly fine tutorial. You also have TechNet available to
you;
http://www.microsoft.com/technet/isa/2006/nlb.mspx
The big question to answer is "what specific benefits do you expect to gain
by adding NLB to your ISA deployment?
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul Laudenslager
Sent: Monday, October 22, 2007 7:48 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] NLB with ISA 2k6 project...
I'm about to play with my first NLB project and have a couple newbie
questions...
1) I assume that ISA 2k6 ENTERPRISE edition is needed. Is this true?
ISA 2k6 Standard doesn't do NLB?
2) I'm going to be using Server 2k3 or 2k3R2. Is Enterprise or Data
Center edition needed for that as well or can I get away with Standard
edition of Server?
3) Are there any 2k6 NLB tutorials out there... I found and printed out
the ISA 2k4 NLB tutorial at
http://www.isaserver.org/tutorials/Installing-Configuring-ISA-Server-2004-En
terprise-Edition-Part2.html
Thanks in advance for your time and consideration.
-Paul
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
