Microsoft KB Archive/938550

From BetaArchive Wiki
Knowledge Base


Article ID: 938550

Article Last Modified on 1/3/2008



APPLIES TO

  • Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition



INTRODUCTION

An update is available for Microsoft Internet Security and Acceleration (ISA) Server 2006. This update enables the following operations for ISA Server integrated network load balancing (NLB):

  • Multicast
  • Multicast with Internet Group Management Protocol (IGMP)


MORE INFORMATION

Important To avoid causing an unstable network condition for the operating system when you change the NLB operating mode, follow these steps exactly as described. You should follow these steps only when traffic interruption can be tolerated.

  1. In the ISA Server Management console, disable Integrated Network Load Balancing. To do this, follow these steps:
    1. In the console tree, expand Arrays, expand the node that corresponds to the array, expand Configuration, right-click Network, and then click Disable Network Load Balancing Integration.
    2. Wait until all array members have synchronized the configuration.
  2. Obtain the NLBClear.exe package from the following Microsoft Download Center Web site:

    [GRAPHIC: Download]Download the NLBClear.exe package now.

    For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

    119591 How to obtain Microsoft support files from online services

    Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
  3. On each array member, run the RemoveAllNLBSetting.cmd script, and then wait until the script starts the Microsoft Firewall service.
  4. Clear the Address Resolution Protocol (ARP) cache on all relevant client computers and routers. To do this, type the following command at a command prompt on each computer:

    Arp –d *

  5. Obtain hotfix rollup package 942639. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

    942639 Description of the ISA Server 2006 hotfix package: September 24, 2007

  6. Apply hotfix rollup package 942639 on the following servers in the order in which they are listed:
    • Primary configuration storage server
    • Replica configuration storage servers
    • Array members
  7. Obtain the script package (KB938550.zip) that enables the current update.

    A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

    To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

    Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

  8. On the primary configuration storage server, follow these steps:
    1. Extract the contents of the KB938550.zip package to a folder. For example, extract the contents to the following folder:

      %ProgramFiles%\Microsoft ISA Server\Tools\KB938550

    2. Run the NLB Operations mode script (KB938550.wsf) at a command prompt.

      To configure ISA Server integrated NLB for unicast operation, run the following command at a command prompt:

      cscript kb938550.wsf /array:NameOfArray /nlb:unicast /net1:ArrayNetwork

      To configure ISA Server integrated NLB for multicast operation, run the following command at a command prompt:

      cscript kb938550.wsf /array:NameOfArray /nlb:multicast /net1:ArrayNetwork

      To configure ISA Server integrated NLB for multicast operation together with IGMP support, run the following command at a command prompt:

      cscript kb938550.wsf /array:NameOfArray /nlb:igmp /net1:ArrayNetwork

      Note In these commands, the NameOfArray placeholder represents the name of the array. The ArrayNetwork placeholder represents the network that will be changed.
    3. Wait until all array members have synchronized the configuration.
  9. In the ISA Server Management console, enable integrated NLB. To do this, follow these steps:
    1. In the console tree, expand Arrays, expand the node that corresponds to the array, expand Configuration, right-click Network, and then click Enable Network Load Balancing Integration.
    2. Wait until all array members have synchronized the configuration.

The scripts modify NLB operation mode only for ISA Server 2006 Enterprise Edition array networks. To use multicast operations with IGMP for ISA Server integrated NLB, the storage schema must be changed. The KB938550.wsf script automatically makes the required change, and then it starts Active Directory Application Mode (ADAM) schema replication. You must run the script on the configuration storage server that hosts the Schema Master operations master role (also known as flexible single master operations or FSMO). The Schema Master role usually resides on the first configuration storage server that is installed in the ISA Server enterprise. When you run the script, you must use an account that is a member of the local Administrators group on the server. The schema has to be changed only one time. Therefore, if you want to change NLB operation mode again, you can run the script on any configuration storage servers or on any ISA Server computers in the ISA Server enterprise.

To see usage instructions for the script, check the Readme.kb938550.txt file, or run the following command at a command prompt:

cscript kb938550.wsf ?


To verify that the NLB operation mode has been changed successfully, open a command prompt on any array member, and then run the following command at the command prompt:

wlbs display


The command output will include information about the NLB configuration, information about the cluster state, and other information. Use the following information to verify the NLB operation mode:

Unicast
MulticastSupportEnable    = 0
IGMPSupport               = DISABLED

Multicast
MulticastSupportEnable    = 1
IGMPSupport               = DISABLED

Multicast with IGMP
MulticastSupportEnable    = 1
IGMPSupport               = ENABLED

How to troubleshoot NLB issues

When you configure multicast operations for NLB, known limitations of switches and of routers may be exposed. To troubleshoot these issues, see the "NLB Troubleshooting Overview for Windows Server 2003" white paper. To do this, visit the following Microsoft Web site:

Keywords: kbqfe kbexpertiseinter KB938550