Forum Discussion

dcasson_21085's avatar
dcasson_21085
Icon for Nimbostratus rankNimbostratus
Feb 23, 2011

AD DC's behind F5....

We have several applications that are antiquated and not AD aware. They authenticate against a specific DC rather than to AD as a whole. So, typical AD load balancing will not work and we prefer not...
config
design
dcasson_21085's avatar
dcasson_21085
Icon for Nimbostratus rankNimbostratus
Feb 23, 2011
Basically yes. We are trying to allow applications to authenticate against the VIP rather than a single DC in case one of the DCs needs to be rebooted or fails. Figured either a round robin VIP or a Sorry server config. And then any special communications between the VIP and the domain controller that might be required like SNAT or NAT to make sure the response goes back to the correct "client" request.

 

 

Dave