SUMMARY
This step-by-step article describes how to configure
Network Load Balancing parameters in Windows Server 2003.
You can use
Network Load Balancing to spread incoming requests across as many as 32
servers. You can do so to expand enterprise-wide services, such as Web servers,
Terminal Services, and streaming-media servers. Network Load Balancing also
makes sure that your servers respond quickly, even under heavy loads. It does
this by automatically detecting when a server stops working, and then quickly
reassigning client traffic among the remaining servers. This safeguard can help
you provide uninterrupted, continuous service for your critical business
programs.
back to the top
Configure Network Load Balancing Parameters
To configure Network Load Balancing parameters, you must
configure the cluster parameters, host parameters, and port
rules.
For additional information about how to set up TCP/IP for
Network Load Balancing, click the article number below to view the article in
the Microsoft Knowledge Base:
323431 How To Set Up TCP/IP for Network Load Balancing in Windows Server 2003
back to the top
Configure Cluster Parameters
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Area Connection Properties
dialog box, click to select the Network Load Balancing check box, and then click Properties.
- Click the Cluster Parameters tab, and then type values in the IP address,
Subnet mask, and Full Internet name check
boxes.
- Under Cluster operation mode, click Multicast to specify whether a multicast media access control address is
used for cluster operations. If you select this option, Network Load Balancing
converts the cluster network address into a multicast address when this is
needed. It also makes sure that the cluster Internet Protocol (IP) addresses
resolve to this multicast address as part of the Address Resolution Protocol
(ARP). The network adapter to which the Network Load Balancing driver is bound
retains its original media access control address. For more information, see
the "Network Load Balancing clusters" Windows Server 2003 Help and Support
Center topic.
- Click to select the Allow remote control
check box to turn on remote-control operations. Type the password in the
Remote password and Confirm password
boxes.
WARNING: The Network Load Balancing remote control option presents many
security risks. Microsoft recommends that you do not turn on remote control and
instead use Network Load Balancing Manager or other remote management tools
such as Windows Management Instrumentation (WMI).
For additional
information about the use of Remote Control in Network Load Balancing, see the
"Network Load Balancing parameters: Network Load Balancing Clusters" Windows
Server 2003 Help and Support Center topic.
back to the top
Configure Host Parameters
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Area Connection Properties
dialog box, click Network Load Balancing, and then click Properties.
- Click the Host Parameters tab.
- Type a value in the Priority (Unique host
identifier) box.
- Under Dedicated IP configuration, type
values in the IP address and Subnet mask
boxes.
- Under Initial host state, specify the host
state with regard to the Network Load Balancing cluster when Windows is
started.
IMPORTANT: You may have a problem if you are working from a computer that
has a single network adaptor that is bound to Network Load Balancing in Unicast
mode. You cannot use Network Load Balancing Manager on this computer to
configure and manage other hosts because a single network adapter in Unicast
mode cannot have intra-host communication. However, you can communicate with
computers that are outside the cluster.
To make sure that Network
Load Balancing Manager is displaying the most recent host information,
right-click the cluster, and then click
Refresh. You must do so because the host properties that Network Load
Balancing Manager displays are a copy of the host properties that were
configured the last time Network Load Balancing Manager connected to that host.
When you click
Refresh, Network Load Balancing Manager reconnects to the cluster and
displays updated information.
NOTE: You can also open the
Network Load Balancing Properties dialog box through the Network Connections tool. However, Network
Load Balancing Manager is the preferred method. If you use the Network
Connections tool, you must make the same configuration changes on every cluster
host. Using both Network Load Balancing Manager and the Network Connections
tool together to change Network Load Balancing properties may create
unpredictable results.
The parameters that are set in the
Network Load Balancing Properties dialog box are recorded in the registry on each host. Changes to
Network Load Balancing parameters are applied when you click
OK in the
Network Load Balancing Properties dialog box. Clicking
OK stops Network Load Balancing (if it is running), reloads the
parameters, and then restarts cluster operations.
back to the top
Configure Port Rules
Before you continue, review the "Port Rules" section of the
"Checklist: Enabling and configuring Network Load Balancing" Windows Server
2003 Help and Support Center topic. Without a complete understanding of the
topics that are addressed in this section, you cannot properly configure port
rules.
Configuring port rules includes the creation, editing, and
removal of port rules.
To create port rules:
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Connection Properties dialog box, click Network Load Balancing, and then click Properties.
- Click the Port Rules tab, and then click ADD.
- Type values for the Port range, Protocols, Filtering mode, Affinity, Load weight, and Handling
priority boxes by using information from the installation check
list.
- Click OK.
To edit port rules:
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Connection Properties dialog box, click Network Load Balancing, and then click Properties.
- Click the Port Rules tab.
- In the list of rules, double-click the rule to display the
rule's parameters in the Configuration area above the list of rules.
- Modify the Port range, Protocols, and Filtering mode parameters as
necessary.
- Click OK.
To remove port rules:
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Area Connection Properties
dialog box, click Network Load Balancing, and then click Properties.
- Click the Port Rules tab, click the rule that you want to remove, and then click Remove.
IMPORTANT: The number and type of rules must be exactly the same for each
host in the cluster. You can make sure of this by using Network Load Balancing
Manager to configure port rules (see the second note below). If you are using
Network Load Balancing Manager, when you add additional hosts, they
automatically inherit the cluster port rules from the initial host.
If a host tries to join the cluster with a different number of rules, or with
different rules from the other hosts, it is not accepted as part of the
cluster. The rest of the cluster then continues to handle the traffic as
before. At the same time, a message is entered into the Windows event log. When
this occurs, see the Event log to determine which host is in conflict with the
other cluster hosts, resolve the conflict, and then restart Network Load
Balancing on that host.
To allow Network Load Balancing to properly
handle IP fragments, avoid using
None when you select UDP or Both for your protocol setting.
NOTE: When you are using Network Load Balancing Manager, you must be a
member of the Administrators group on the host that you are configuring, or you
must have been delegated the appropriate authority. As a security best
practice, consider using "Run as" to perform this procedure. If you are
configuring a cluster or host by running Network Load Balancing Manager from a
computer that is not part of the cluster, you do not have to be a member of the
Administrators group on that computer.
You can also open the
Network Load Balancing Properties dialog box through the Network Connections tool. However, Network
Load Balancing Manager is the preferred method. If you use the Network
Connections tool, you must make the same configuration changes on every cluster
host. Using both Network Load Balancing Manager and the Network Connections
tool together to change Network Load Balancing properties may lead to
unpredictable results.
If all your hosts are running a product in
Windows Server 2003, you can specify port rules to apply to only specific IP
addresses. This is useful when you create virtual clusters. If you are not
running Windows Server 2003, you must apply the port rules to all IP addresses.
For more information about virtual clusters, see "Understanding Virtual
Clusters".
The list of all currently installed port rules is sorted
by port range.
The parameters that are set in the
Network Load Balancing Properties dialog box are recorded in the registry on each host.
Changes to Network Load Balancing parameters are applied when you click
OK in the
Network Load Balancing Properties dialog box. Clicking
OK stops Network Load Balancing (if it is running), reloads the
parameters, and then restarts cluster operations.
If you are working
from a computer that has a single network adaptor that is bound to Network Load
Balancing in Unicast mode, you cannot use Network Load Balancing Manager on
this computer to configure and manage other hosts because a single network
adapter in Unicast mode cannot have intra-host communication. However, you can
communicate with computers that are outside the cluster.
To make
sure that Network Load Balancing Manager is displaying the most recent host
information, right-click the cluster, and then click
Refresh. You must do so because the host properties that Network Load
Balancing Manager displays are a copy of the host properties that were
configured the last time Network Load Balancing Manager connected to that host.
When you click
Refresh, Network Load Balancing Manager reconnects to the cluster and
displays updated information.
back to the top
Enable Multicast Support
- To start Network Load Balancing Manager, type
nlbmgr at a command prompt, and then press
ENTER.
- If Network Load Balancing Manager does not already list the
cluster, connect to the cluster.
- Right-click the cluster, and then click Cluster Properties.
- On the Cluster Parameters tab, in Cluster operation mode, click Multicast. If appropriate, you can also enable Internet Group Management
Protocol (IGMP) support by clicking to select the IGMP
multicast check box.
IMPORTANT: If you are working from a computer that has a single network
adaptor that is bound to Network Load Balancing in Unicast mode, you cannot use
Network Load Balancing Manager on this computer to configure and manage other
hosts because a single network adapter in Unicast mode cannot have intra-host
communication. However, you can communicate with computers that are outside the
cluster.
NOTE: When you are using Network Load Balancing Manager, you must be a
member of the Administrators group on the host that you are configuring, or you
must have been delegated the appropriate authority. As a security best
practice, consider using "Run as" to perform this procedure. If you are
configuring a cluster or host by running Network Load Balancing Manager from a
computer that is not part of the cluster, you do not have to be a member of the
Administrators group on that computer.
You can also open the
Network Load Balancing Properties dialog box through the Network Connections tool. However, Network
Load Balancing Manager is the preferred method. If you use the Network
Connections tool, you must make the same configuration changes on every cluster
host. Using both Network Load Balancing Manager and the Network Connections
tool together to change Network Load Balancing properties may lead to
unpredictable results.
You can only enable IGMP support when your
cluster is configured for multicast mode. If you enable IGMP support, the
permitted multicast IP address is restricted to the standard class D range.
This is 224.0.0.0 to 239.255.255.255.
back to the top
Enable Internet Group Management Protocol (IGMP) Support
- To start Network Load Balancing Manager, type
nlbmgr at a command prompt, and then press
ENTER.
- If Network Load Balancing Manager does not already list the
cluster, connect to the cluster.
- Right-click the cluster, and then click Cluster Properties.
- On the Cluster Parameters tab, click to select the IGMP multicast check
box to enable IGMP support on all the hosts in the cluster.
IMPORTANT: If you are working from a computer that has a single network
adaptor that is bound to Network Load Balancing in Unicast mode, you cannot use
Network Load Balancing Manager on this computer to configure and manage other
hosts because a single network adapter in Unicast mode cannot have intra-host
communication. However, you can communicate with computers that are outside the
cluster.
NOTE: When you are using Network Load Balancing Manager, you must be a
member of the Administrators group on the host that you are configuring, or you
must have been delegated the appropriate authority. As a security best
practice, consider using "Run as" to perform this procedure. If you are
configuring a cluster or host by running Network Load Balancing Manager from a
computer that is not part of the cluster, you do not have to be a member of the
Administrators group on that computer.
You can also open the
Network Load Balancing Properties dialog box through the Network Connections tool. However, Network
Load Balancing Manager is the preferred method. If you use the Network
Connections tool, you must make the same configuration changes on every cluster
host. Using both Network Load Balancing Manager and the Network Connections
tool together to change Network Load Balancing properties may lead to
unpredictable results.
You can only enable IGMP support when your
cluster is configured for multicast mode. If you enable IGMP support, the
permitted multicast IP address is restricted to the standard class D range.
This is 224.0.0.0 to 239.255.255.255.
back to the top
Manage Existing Clusters from Network Load Balancing Manager by Using a Host List
- From the Windows interface:
- To start Network Load Balancing Manager, type
nlbmgr at a command prompt, and then press
ENTER.
- On the File menu, click Load Host List.
- Locate your host list text file, click it, and then
click Open.
IMPORTANT: If you are working from a computer that has a single network
adaptor that is bound to Network Load Balancing in Unicast mode, you cannot use
Network Load Balancing Manager on this computer to configure and manage other
hosts because a single network adapter in Unicast mode cannot have intra-host
communication. However, you can communicate with computers that are outside the
cluster.
For security reasons, make sure that only users in the
local Administrators group have access to the host list file.
NOTE: When you are using Network Load Balancing Manager, you must be a
member of the Administrators group on the host that you are configuring, or you
must have been delegated the appropriate authority. As a security best
practice, consider using "Run as" to perform this procedure. If you are
configuring a cluster or host by running Network Load Balancing Manager from a
computer that is not part of the cluster, you do not have to be a member of the
Administrators group on that computer.
The host list text file is a
text file that you create by using Notepad or any other similar tool. The file
must list the name of each host. Each host name must be separated by a line
break. You can include comments in the host list by preceding the comment with
a semicolon (;).
You can use this procedure to connect to multiple
hosts and all Network Load Balancing clusters on those hosts. The clusters and
hosts are then displayed in Network Load Balancing Manager. This is
particularly useful when a host's Network Load Balancing network adapter is
having connectivity problems, but another network adapter is available on that
host. You can also use this procedure to detect and diagnose problems such as
cluster hosts that are converging separately.
- At a command prompt:
- Click Start, point to All Programs, point to Accessories, and then click Command Prompt.
- At the command prompt, type nlbmgr /hostlist
host-list, and then press ENTER, where
host-list is the fully qualified path to a text file
that you create using Notepad or any other similar tool. The file must list the
name of each host. Each host name must be separated by a line break.
IMPORTANT: For security reasons, make sure that only users in the local
Administrators group have access to the host list file.
NOTE: To run Nlb.exe from a remote computer, you must enable remote
control on the host that is running Network Load Balancing. The Network Load
Balancing remote control option presents many security risks. Only use remote
control on a secure computer inside your firewall. Because of the many security
risks remote control presents, Microsoft recommends that you do not enable the
remote control feature. Instead, use other remote management tools such as
Network Load Balancing Manager or Windows Management Instrumentation (WMI).
When you are using Nlb.exe, you must be a member of the
Administrators group on the host that you are configuring, or you must have
been delegated the appropriate authority. As a security best practice, consider
using "Run as" to perform this procedure. If you are configuring a cluster or
host by running Nlb.exe from a computer that is not part of the cluster, you do
not have to be a member of the Administrators group on that computer.
To view the complete syntax for this command, type
nlbmgr
/help at a command prompt, and then press ENTER.
Make
sure that only users in the local Administrators group have access to the host
list file.
You can include comments in the host list by preceding
the comment with a semicolon (;).
You can use this procedure to
connect to multiple hosts and all Network Load Balancing clusters on those
hosts. The clusters and hosts are then displayed in Network Load Balancing
Manager. This is particularly useful when a host's Network Load Balancing
network adapter is having connectivity problems, but another network adapter is
available on that host. You can also use this procedure to detect and diagnose
problems such as cluster hosts that are converging separately.
back to the top
Troubleshooting
The number and type of rules must be exactly the same for each
host in the cluster. If a host tries to join the cluster with a different
number of rules from the other hosts, it is not accepted as part of the
cluster, and the rest of the cluster continues to handle the traffic as before.
At the same time, a message is logged in the Windows Event log. If this occurs,
view the Event log to determine which host is in conflict with the other
cluster hosts, resolve the conflict, and then restart Network Load Balancing on
that host.
You must also add the cluster IP address or addresses to
the TCP/IP settings of the local area connection:
- Click Start, click Control Panel, and then double-click Network Connections.
- Right-click Local Area Connection, and then click Properties.
- In the Local Area Connection Properties
dialog box, click Internet Protocol, and then click Properties.
- Click Advanced.
- Click ADD.
- Add the cluster IP and subnet mask addresses.
- Confirm your changes.
back to the top