For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Erich_Rockman_1's avatar
Erich_Rockman_1
Icon for Cirrus rankCirrus
Mar 21, 2018
Solved

RD Connection Broker Loadbalancing w/F5 & Server 2016

Experts. Want to lb RDSH using F5 but still use the RDCB to reestablish disconnected sessions. My F5 is configured correctly with a :3389 VIP and a dns name rds.domain.com pointing to the VIP. I conf...
application delivery
LTM
  • Erich_Rockman_1's avatar
    Erich_Rockman_1
    Mar 22, 2018

    The RDCB must be on a separate server. The GPO settings "Use IP address redirection" (This enables token redirection which the RDP persistence profile can use. There is a 9 character limit with the token code, so make sure that your logins are unique (THEDOMAIN\user) would make it look like all the users are the same - THEDOMAIN) and "Use RD Connection Broker load balancing" should be set to Disabled. You will need to set the monitor get/receive strings as seen here: https://devcentral.f5.com/questions/microsoft-server-2016-remote-desktop-session-host-53403. Be sure to create the collection with the GPOs "Not Configured", then Disable and force update.

     

Erich_Rockman_1's avatar
Erich_Rockman_1
Icon for Cirrus rankCirrus
Mar 22, 2018

The RDCB must be on a separate server. The GPO settings "Use IP address redirection" (This enables token redirection which the RDP persistence profile can use. There is a 9 character limit with the token code, so make sure that your logins are unique (THEDOMAIN\user) would make it look like all the users are the same - THEDOMAIN) and "Use RD Connection Broker load balancing" should be set to Disabled. You will need to set the monitor get/receive strings as seen here: https://devcentral.f5.com/questions/microsoft-server-2016-remote-desktop-session-host-53403. Be sure to create the collection with the GPOs "Not Configured", then Disable and force update.