Help and Support
 

powered byLive Search

The Firewall service may not start when you enable 802.1Q VLAN tagging and integrated NLB in ISA Server 2004, Enterprise Edition with Service Pack 2

Article ID:912943
Last Review:December 4, 2007
Revision:1.2

SYMPTOMS

You are running Microsoft Internet Security and Acceleration (ISA) Server 2004, Enterprise Edition with Service Pack 2 (SP2). You enable 802.1Q Virtual Local Area Network (VLAN) tagging and integrated Network Load Balancing (NLB) on separate interfaces of the same network adapter. After you do this, the Firewall service may not start.

Back to the top

RESOLUTION

By default, ISA Server 2004 SP2 does not enable 802.1Q VLAN tagging and integrated NLB on different interfaces of a network adapter. To enable this functionality, you must run the following Microsoft Visual Basic Scripting Edition (VBScript) file on the computer that is running ISA Server 2004, Enterprise Edition with SP2. To do this, follow these steps:
1.Copy the following text into Notepad:
Sub AddAllowVLANandNLB()

' Create the root object.
Dim root ' The FPCLib.FPC root object
Set root = CreateObject("FPC.Root")

'Declare the other objects needed.
Dim array ' An FPCArray object
Dim VendorSets ' An FPCVendorParametersSets collection
Dim VendorSet ' An FPCVendorParametersSet object

' Get references to the array object
' and the network rules collection.
Set array = root.GetContainingArray
Set VendorSets = array.VendorParametersSets

On Error Resume Next
Set VendorSet = VendorSets.Item( "{143F5698-103B-12D4-FF34-1F34767DEabc}" )

If Err.Number <> 0 Then
Err.Clear

' Add the item
Set VendorSet = VendorSets.Add( "{143F5698-103B-12D4-FF34-1F34767DEabc}" )
CheckError
WScript.Echo "New VendorSet added... " & VendorSet.Name

Else
WScript.Echo "Existing VendorSet found... value- " & VendorSet.Value("AllowVLANandNLB")
End If

if VendorSet.Value("AllowVLANandNLB") <> true Then

Err.Clear
VendorSet.Value("AllowVLANandNLB") = true

If Err.Number <> 0 Then
CheckError
Else
VendorSets.Save false, true
CheckError

If Err.Number = 0 Then
WScript.Echo "Done with AllowVLANandNLB, saved!"
End If
End If
Else
WScript.Echo "Done with AllowVLANandNLB, no change!"
End If

End Sub

Sub CheckError()

If Err.Number <> 0 Then
WScript.Echo "An error occurred: 0x" & Hex(Err.Number) & " " & Err.Description
Err.Clear
End If

End Sub

AddAllowVLANandNLB
2. In Notepad, click File, click Save As, and then type a name for the script. For example, type VBScriptName.vbs in the File name box, and then click Save.
3.Run the file that you saved in step 2.
4.Restart the Firewall service after you run the VBScript file.

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Back to the top

MORE INFORMATION

Notes
For more information about the 802.1Q protocol that is defined by the Institute of Electrical and Electronics Engineers, Inc. (IEEE), visit the following IEEE Web site:
http://www.ieee802.org/1/pages/802.1Q.html (http://www.ieee802.org/1/pages/802.1Q.html)
802.1Q functionality depends on network adapter drivers. Contact the network adapter manufacturer to determine whether a network adapter supports this protocol.
You cannot enable 802.1Q VLAN tagging and integrated NLB on the same interface of a network adapter. This limitation is imposed by NLB.
You cannot enable both 802.1Q VLAN tagging and integrated NLB on different interfaces of a network adapter on ISA Server 2004, Enterprise Edition computers. To enable this functionality, you must install ISA Server 2004 SP2 and run the VBScript file that is described in the "Resolution" section.

Back to the top


APPLIES TO
Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 2, when used with:
  Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition

Back to the top

Keywords: 
kbtshoot kbprb KB912943

Back to the top

Article Translations

 

Other Support Options

  • Need More Help?
    Contact a Support professional by Email, Online or Phone.
  • Customer Service
    For non-technical assistance with product purchases, subscriptions, online services, events, training courses, corporate sales, piracy issues, and more.
  • Newsgroups
    Pose a question to other users. Discussion groups and Forums about specific Microsoft products, technologies, and services.