Hello,
We are currently attempting to set up NLB on a new Windows Server 2012 R2 server (second server to come soon) and are having some issue accessing our websites from outside.
Our configuration is External IP -> Cisco 2911 Router (192.168.5.1) -> Cisco 2960 Switch (192.168.5.2) -> All our servers
The NLB is configured for ICMP multicasting.
We have configured the one server (192.168.5.21) with the main IP address of the NLB as 192.168.5.110. This has 4 other addresses (192.168.5.111 -> 192.168.5.115) and the "direct ip" of 192.168.5.211.
If we point our external traffic directly to the server's address at 192.168.5.21 the sites are served with no issue (but obviously, no load balancing).
ip nat inside source static tcp 192.168.5.21 8081 208.xx.x.xxx 8081 extendable
ip nat inside source static tcp 192.168.5.21 8085 208.xx.x.xxx 8085 extendable
ip nat inside source static tcp 192.168.5.21 8087 208.xx.x.xxxx 8087 extendable
ip nat inside source static tcp 192.168.5.21 8088 208.xx.x.xxxx 8088 extendable
We'd like to point them all at 192.168.5.110 for the NLB
We've added the ARP entry to point 192.168.5.110 to the proper MAC address
Internet 192.168.5.110 - 0100.5e7f.056e ARPA
and are able to ping the IP address
#ping 192.168.5.110
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.5.110, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
But don't have ARP entries for the other IP addresses (and can't ping them).
The following entries were configured by one of the techs on the switch while attempting to get this to work.
mac address-table static 0100.5e7f.056f vlan 1 interface GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20
mac address-table static 0100.5e7f.056e vlan 1 interface GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20
mac address-table static 0100.5e7f.0571 vlan 1 interface GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20
mac address-table static 0100.5e7f.0570 vlan 1 interface GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20
Just to re-state, we can ping the main IP address (192.168.5.110), serve the sites on the actual IP address (192.168.5.21), but cannot see or serve the sites on the NLB address or ping any of the nodes.
Thank you in advance,
Trevor Watson
