View Connection / Security Server Tunneling question

[wframe]

Greetings,

We currently run with one internal View Connection server, tunneling disabled.  If we build a Security server and enable tunneling for the Security server, I assume the View Connection server can still be left with tunneling disabled - is this the case?

Your insight would be greatly appreciated!

W

[mittim12 · Accepted solution]

Whatever connection broker your security server is paired with would need the tunneling enabled.   Since you only have one it would need the tunneling enabled. 

[markbenson]

mittim12 is correct. To support internal access and external access, it is more efficient to have a dedicated Connection Server for each.

Have one Connection Server (CS1) with a connected Security Server (SS1) for remote access users. CS1 should have tunnelling and PCoIP gateway enabled.

Have a second connection Server (CS2) for internal users with no tunnelling and no PCoIP gatewaying.

This gives you the best of both worlds. Also see http://communities.vmware.com/docs/DOC-14974

Mark.

[wframe]

Thank you both very much for your quick and helpful responses!

On a similar note - would I simply follow the VMware View installation documentation 'Install a Replicated Instance of View Connection Server' section and re-configure the new connection server?  Or does the replicated install tie the configuration of each connection server together?

Regards,

W

[mittim12]

When you install a connection broker as a replica it ask you to specify an exisiting connection broker.   It then puts the replica server and that connection broker in a replica group.   Nothing will need to be done on the original connection broker from that standpoint.