I have two exchange 2010 servers behind my firewall. i have configured DAG. Now i need to loadbalance OWA. I dont know how to do this with Astaro.

i currently have a FULL NAT rule going to one of the exchange servers and it works without issue. I found no problem configuring server loadbalancing but i dont know how to NAT that. i assumed that creating a loadbalanced group would creat some virtual item that i could put in the NAT rules but it didnt.

my FULL NAT looks like this.

source (any)
protocol (HTTP/HTTPS)
destination ( external IP)

DNAT Destination ( exchange server 1)
DNAT Protocol (none)

SNAT Destination (Internal IP)
SNAT Protocol (none).

any help would be greatful. I searched the forums and the astro website but only found generic answers.

Thank you.

I don't know what a "loadbalanced group" is - do you mean that you configured 'Server Load Balancing' in 'Network Security'?

If so, then I think your NAT rule is capturing the traffic before 'Load Balancing' gets a chance to work. Just disable the NAT, and the load balancing rule, if correctly configured, should do what you seem to want.

Your question is interesting. I didn't realize that Exchange servers in a DAG were, in effect, "clustered" instead of providing standby backup for each other in the event of failure of one server.

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Sophos Gold Solution Partner
www.MediaSoftUSA.com
Addicted to my iPhone!

Yes the mailbox Role is active/passive but the client access role needs to be loadbalanced for seemless failover since i am not using a different CAS server.

So i disabled my FULL NAT rule and created the loadbalanced server do i need to now create a packet filter rule when using server load balancing ?

Also i only have a single external iP so thats why i was using NAT.

Hi, iirc, you do need a PacketFilter rule with the load balancer (and it wouldn't hurt even if it's not needed):

Source: any
Dest: EXT Interface (or whatever interface/IP the LoadBalancer is setup for)
Service: HTTP/HTTPS
ALLOW

Barry

__________________
http://JobOyster.com
http://DealBert.net
End-user since v1.x

• ASL 8.3x, HP DL145, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  
• ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  
• ASL 9.0x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD.
  Netgear GS108T gigE VLAN switch & Astaro AP30 Access Point with VLANs.
  100-IP Home Power User License. 15/5mbit FiOS internet.