Wednesday, 29 June 2011

Forcing Kerberos to use TCP

We have been having issues with a 2008 r2 SP1 Hyper-V cluster, the Dell guy told me to set Kerberos to use TCP rather than UDP. This needs doing on all DCs and node in the cluster.

  1. Start Registry Editor.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ Kerberos\Parameters
    Note If the Parameters key does not exist, create it now.
  3. On the Edit menu, point to New, and then click DWORD Value.
  4. Type MaxPacketSize, and then press ENTER.
  5. Double-click MaxPacketSize, type 1 in the Value data box, click to select theDecimal option, and then click OK.
  6. Quit Registry Editor.
  7. Restart your computer.

Also check the binding on the hyper-v hosts, make sure the management NIC is first, then the LiveMigration and then the heartBeat.


No comments:

Post a Comment