View PCOIP Not working after load balancing setup

[ABEIQ]

Hi All,

Looking for some help after installing and configuring load balancing using NLB for a customer.

The customer had 2 sets of security servers and connection servers, one pair of each being used for internal and the other reaching external. For internal access, a DNS entry was previously configured so that any internal users trying to reach the URL of their view environment was directed to the first security server ie. view.company.com > 192.168.0.100 (Sec server 1). For external access, their public IP was translated to the second view server ie. view.company.com > 101.101.200.200 > 192.168.0.101 (Sec Server 2).

I did some work yesterday implementing windows network load balancing for their View security servers. I added the roles to both servers, created the cluster and added the hosts. I updated the internal DNS record to point to the Load balanced IP and updated the NAT rule on the firewall to point to this as well. On the NLB cluster i enabled sticky sessions and am using multicast (Small environment)

During testing, when using desktop pools that uses BLAST only, sessions worked flawlessly, users were directed to security servers via the VIP, i could see traffic flowing etc, but when using PCOIP, desktops would connect to a session but be presented with a black screen then an error message regarding not being able to connect. I have confirmed all ports required are open. i did also update the connection servers to look at the VIP for the external PCOIP Address as well as the security servers to the public IP that is translated. I couldnt see anything obvious but has anyone else seen this issue before?

Any input would be appreciated.

[cbaptiste]

This is so tricky. I don't have all the information so I am going to guess that your security servers are located in your DMZ. If so, can you check to see if your security servers can communicate with the VM. There are so many reasons to get a black screen. One of them could be the port being closed.  If the VMs are on your LAN network and your security servers are not then the port must be open for them to communicate.

If you could post pictures of your configuration that would make it easier to help. Remember not to show actual IPs and DNS.

[ABEIQ]

Thanks for the response.

The security servers are in the "DMZ" apparently .. Or they should be.

I have confirmed that the required ports are open from both security servers out to the internet and back in to the connection servers , and the connection servers to security servers and internet. I have also had a look over the configuration and i can see that the security servers and connection servers are all in the same vlan and port group as each other.

I have attached an overview of the design, let me know if this is sufficient or of there is anything else i can provide.