Connect from DMZ Web Server to SQL Cluster Virtual IP through PIX

[vsehgal]

Hello - I'm having connectivity issues while attempting to connect to the internal sql cluster name or ip address from my web server on the dmz, although I am able to get to one of the servers in the cluster directly via its name/ip, but not to the other. I have tcp 1116, 1433, 135, icmp and netbios-ssn, ns(udp) permitted. any suggestions would be greatly appreciated.

[Fernando_Meza]

Hi ..

Cluster and that staff is not my thing .. but I suggest you checking the ARP table on the ASA and any switches between the DMZ and the SQL to make sure there is an entry for the Virtual IP and its respective MAC address ( I believe it might be a multicast MAC address beginning with 01-00-5E .. ). Assuming you have allowed access from the DMZ to the servers .. you should be at least be able to access both by their physical IP address and so that is another thing I suggest you checking first.

This article might give you a hint of what I mean !!

http://support.microsoft.com/kb/193602

I hope it helps .. please rate it if it does !!