Addresses for NLB-enabled remote sites (Enterprise Edition)

ISA Server 2006 Enterprise Edition only

When the remote site network to which you are connecting is an array with Network Load Balancing (NLB) enabled, the address you specify for the remote tunnel endpoint must be the virtual IP address of the NLB-enabled array. For instructions, see Configure remote tunnel endpoint (Enterprise Edition).

Addresses

When you create the remote site network, specify all the addresses in the remote site.

In addition, for Internet Protocol security (IPsec) networks, for Hypertext Transfer Protocol (HTTP) proxy or network address translation (NAT) traffic between sites, you must include all the dedicated IP addresses of the network adapters associated with the remote site network. This is because the source IP addresses for HTTP proxy and NAT traffic from remote sites are subject to address translation (on the remote side). The local site therefore sees the traffic as if it is arriving from the primary IP address of the remote site—that is from its dedicated IP address. For instructions, see Configure addresses for a remote site network.

Remote NLB

When the remote site network is an NLB-enabled array, the initial connection from this array of Microsoft Internet Security and Acceleration (ISA) Server 2006 computers will be to the virtual IP address of the computer. The tunnel will be established from one of the dedicated IP addresses on the remote array. For this reason, you must specify all the dedicated IP addresses as additional remote tunnel endpoints. For instructions, see Configure additional tunnel endpoints for the remote site (Enterprise Edition).




web link Get latest ISA Server content at ISA Server Guidance.
Send feedback about this page Send feedback about this page.