In a previous post I outlined how to configure the F5 BIG-IP Local Traffic Manager (LTM) to serve as the Network Location Server (NLS) for a DirectAccess deployment. Many people then asked if it was possible to do the same with the Kemp Technologies LoadMaster load balancing solution. Until now, it was not. However, beginning with release 7.1-28b it is!
After upgrading your Kemp LoadMaster to version 7.1-28b, open the LoadMaster management console, expand Virtual Services, and then click Add New. Specify a Virtual Address, enter 443 for the Port, optionally provide a descriptive Service Name, select TCP for the Protocol, and then click Add this Virtual Service.
Expand SSL Properties and select Enabled for SSL Acceleration. If you have not yet installed the SSL certificate for the NLS, you will be prompted to use a temporary certificate.
Expand Advanced Properties and select 200 OK from the Error Code drop-down list. Optionally you can enter a description for the service in the Error Message box and click Set Message. This will be displayed if someone opens the NLS web site in a web browser.
At the top of the page click Back. If the SSL certificate for the NLS was not previously installed, add it now by clicking Add New.
Click Import Certificate and provide the certificate file as required. Once the certificate is installed successfully, assign the certificate to the NLS virtual service and click Save Changes.
Once complete, update the DNS record for NLS to point to the IP address assigned to the virtual service running on the LoadMaster.
For more information about the Kemp Technologies LoadMaster load balancer and to download a free fully-functional trial, click here. You can also download a completely free and fully-functional version of the Kemp LoadMaster here.
To learn more about the DirectAccess NLS, please refer to the following posts:
DirectAccess Network Location Server Guidance
DirectAccess NLS Deployment Considerations for Large Enterprises
Maxime Rastello (MVP)
/ August 24, 2015Nice post !
FYI you can also use NetScaler LB to handle NLS by creating an HTTPS “Responder”. The responder Will include the HTML code to emulate the page.
Richard M. Hicks
/ September 1, 2015That’s great to hear. Is there a virtual evaluation edition of the NetScaler I could use to test and document that procedure?
raininginhere
/ October 27, 2015Great post. Thanks for your help. Can you post another how to on ‘directAccess-Multisite’ deployment?
Richard M. Hicks
/ October 28, 2015You can find that information in the DirectAccess Deployment Guide for Kemp LoadMaster load balancer. More details here: http://directaccess.richardhicks.com/2015/02/05/directaccess-deployment-guide-for-kemp-loadmaster-load-balancers/.