Jump to content

Domain/Public category/LDAP authentication failed 0x51/Gateway resolution failed 0x43


Recommended Posts

Posted (edited)

Here's a real head-scratcher for you..

 

Our Hypervisors (Windows Server 2022 Datacentre, 21H2 20348.1487 build) have been experiencing weird network inconsistencies... but only on the Hyper-V SET interfaces.

Each SET is 3 out of 6 available interfaces on the same VLAN. Both static addresses. Both have the same subnet mask, default gateway and DNS servers.

Both have a similar, but different MAC address that match the vendor range.

IPv6 is disabled on both SET interfaces and both have the domain.tld manually set in the DNS suffic for this connection: option of Advanced TCP/IP settings, with both Register this connection's addresses in DNS and Use this connection's DNS suffix in DNS registration ticked.

 

Yet one of them works, and one of them doesn't.

network1.PNG

It isn't always this way, both were showing Public network until I started breaking the ports (see switch info below) on the switch to make sure the port-to-switch documentation was correct, after which Team A decided it was Domain and Team B still stays as-is even after doing the same to Team B's ports.

 

I tried remaking the teams (hence the 2.0) with the following PowerShell commands, which didn't fix the issue

new-vmswitch "TeamA 2.0" -NetAdapterName "SLOT 2 Port 1","SLOT 6 Port 1","SLOT 8 Port 1" -EnableEmbeddedTeaming $true -Notes "3 QLogic SLOT X Port 1 interfaces"

new-vmswitch "TeamB 2.0" -NetAdapterName "SLOT 2 Port 2","SLOT 6 Port 2","SLOT 8 Port 2" -EnableEmbeddedTeaming $true -Notes "3 QLogic SLOT X Port 2 interfaces"

 

 

All 6 ports on the switch it's connected to are configured identically.

interface 1/1/[color="#FF0000"]x[/color]
   no shutdown
   description HypervisorHostname - Team [color="#FF0000"]X[/color] - S[color="#FF0000"]#[/color]P[color="#FF0000"]#[/color]
   no routing
   vlan trunk native 1
   vlan trunk allowed [color="#FF0000"]##[/color],[color="#FF0000"]##[/color],[color="#FF0000"]##[/color],[color="#FF0000"]##[/color]

Initially I thought oh, put the vlan trunk native to match the VLAN the servers are on! Nope, bricks the link.

 

NlaSvc's event log (Event Viewer, Microsoft, Windows, NlaSvc, Operational) has the following events:

Gateway resolution failed on interface {d54340f1-8e7b-4a97-b376-1c2adc94687c} for [color="#FF0000"]IP[/color].[color="#FF0000"]of[/color].[color="#FF0000"]Gateway[/color].[color="#FF0000"]254[/color] with error: 0x43

LDAP authentication on interface {D54340F1-8E7B-4A97-B376-1C2ADC94687C} ([color="#FF0000"]IP[/color].[color="#FF0000"]of[/color].[color="#FF0000"]Host[/color].[color="#FF0000"]Server[/color]) failed with error 0x51

 

 

Other random-but-possibly-relevant bits

PS C:\Windows\system32> get-vmswitchteam "TeamA 2.0" | Select *
Name                           : TeamA 2.0
Id                             : 49873dc8-fd70-437d-b7b8-151bd39c11a1
NetAdapterInterfaceDescription : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #5, QLogic BCM57810 10 Gigabit
                                Ethernet (NDIS VBD Client) #6, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client)
                                #3}
NetAdapterInterfaceGuid        : {96231111-35fa-489d-a212-6bc36b0210ce, 3cff025b-3118-484d-93d0-b4face212df5,
                                c52107aa-bcaf-4cf0-902b-d8558b4718a1}
TeamingMode                    : SwitchIndependent
LoadBalancingAlgorithm         : Dynamic

 

PS C:\Windows\system32 > get-vmswitchteam "TeamB 2.0" | Select *
Name                           : TeamB 2.0
Id                             : 33a363a6-e757-4b2f-87c1-9698b4517ddb
NetAdapterInterfaceDescription : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client), QLogic BCM57810 10 Gigabit
                                Ethernet (NDIS VBD Client) #2, QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client)
                                #4}
NetAdapterInterfaceGuid        : {821f55b6-e05c-4566-bc37-2213359e19bf, 6cd7e5f1-d711-43b4-8893-6b78df590e37,
                                ec428132-cd24-44a9-8c2f-f878f61bc442}
TeamingMode                    : SwitchIndependent
LoadBalancingAlgorithm         : Dynamic

 

PS C:\Windows\system32> Get-VMSwitch -name "TeamA 2.0" | Select *


DefaultQueueVmmqQueuePairs                       : 16
DefaultQueueVmmqQueuePairsRequested              : 16
Name                                             : TeamA 2.0
Id                                               : 49873dc8-fd70-437d-b7b8-151bd39c11a1
Notes                                            : 3 QLogic 'SLOT X Port 1' interfaces
Extensions                                       : {Microsoft Windows Filtering Platform, Microsoft NDIS Capture}
BandwidthReservationMode                         : Absolute
PacketDirectEnabled                              : False
EmbeddedTeamingEnabled                           : True
AllowNetLbfoTeams                                : False
IovEnabled                                       : False
SwitchType                                       : External
AllowManagementOS                                : True
NetAdapterInterfaceDescription                   : Teamed-Interface
NetAdapterInterfaceDescriptions                  : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #5, QLogic
                                                  BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #6, QLogic BCM57810
                                                  10 Gigabit Ethernet (NDIS VBD Client) #3}
NetAdapterInterfaceGuid                          : {96231111-35fa-489d-a212-6bc36b0210ce,
                                                  3cff025b-3118-484d-93d0-b4face212df5,
                                                  c52107aa-bcaf-4cf0-902b-d8558b4718a1}
IovSupport                                       : False
IovSupportReasons                                : {This network adapter does not support SR-IOV.}
AvailableIPSecSA                                 : 0
NumberIPSecSAAllocated                           : 0
AvailableVMQueues                                : 516096
NumberVmqAllocated                               : 10
IovQueuePairCount                                : 72
IovQueuePairsInUse                               : 13
IovVirtualFunctionCount                          : 0
IovVirtualFunctionsInUse                         : 0
PacketDirectInUse                                : False
DefaultQueueVrssEnabledRequested                 : True
DefaultQueueVrssEnabled                          : True
DefaultQueueVmmqEnabledRequested                 : True
DefaultQueueVmmqEnabled                          : False
DefaultQueueVrssMaxQueuePairsRequested           : 16
DefaultQueueVrssMaxQueuePairs                    : 16
DefaultQueueVrssMinQueuePairsRequested           : 1
DefaultQueueVrssMinQueuePairs                    : 1
DefaultQueueVrssQueueSchedulingModeRequested     : StaticVrss
DefaultQueueVrssQueueSchedulingMode              : StaticVrss
DefaultQueueVrssExcludePrimaryProcessorRequested : False
DefaultQueueVrssExcludePrimaryProcessor          : False
SoftwareRscEnabled                               : True
RscOffloadEnabled                                : False
BandwidthPercentage                              : 10
DefaultFlowMinimumBandwidthAbsolute              : 300000000
DefaultFlowMinimumBandwidthWeight                : 0
CimSession                                       : CimSession: .
ComputerName                                     : [color="#FF0000"]HypervisorHostname[/color]
IsDeleted                                        : False

 

 

 

PS C:\Windows\system32> Get-VMSwitch -name "TeamB 2.0" | Select *

DefaultQueueVmmqQueuePairs                       : 16
DefaultQueueVmmqQueuePairsRequested              : 16
Name                                             : TeamB 2.0
Id                                               : 33a363a6-e757-4b2f-87c1-9698b4517ddb
Notes                                            : 3 QLogic 'SLOT X Port 2' interfaces
Extensions                                       : {Microsoft Windows Filtering Platform, Microsoft NDIS Capture}
BandwidthReservationMode                         : Absolute
PacketDirectEnabled                              : False
EmbeddedTeamingEnabled                           : True
AllowNetLbfoTeams                                : False
IovEnabled                                       : False
SwitchType                                       : External
AllowManagementOS                                : True
NetAdapterInterfaceDescription                   : Teamed-Interface
NetAdapterInterfaceDescriptions                  : {QLogic BCM57810 10 Gigabit Ethernet (NDIS VBD Client), QLogic
                                                  BCM57810 10 Gigabit Ethernet (NDIS VBD Client) #2, QLogic BCM57810
                                                  10 Gigabit Ethernet (NDIS VBD Client) #4}
NetAdapterInterfaceGuid                          : {821f55b6-e05c-4566-bc37-2213359e19bf,
                                                  6cd7e5f1-d711-43b4-8893-6b78df590e37,
                                                  ec428132-cd24-44a9-8c2f-f878f61bc442}
IovSupport                                       : False
IovSupportReasons                                : {This network adapter does not support SR-IOV.}
AvailableIPSecSA                                 : 0
NumberIPSecSAAllocated                           : 0
AvailableVMQueues                                : 516096
NumberVmqAllocated                               : 1
IovQueuePairCount                                : 72
IovQueuePairsInUse                               : 4
IovVirtualFunctionCount                          : 0
IovVirtualFunctionsInUse                         : 0
PacketDirectInUse                                : False
DefaultQueueVrssEnabledRequested                 : True
DefaultQueueVrssEnabled                          : True
DefaultQueueVmmqEnabledRequested                 : True
DefaultQueueVmmqEnabled                          : False
DefaultQueueVrssMaxQueuePairsRequested           : 16
DefaultQueueVrssMaxQueuePairs                    : 16
DefaultQueueVrssMinQueuePairsRequested           : 1
DefaultQueueVrssMinQueuePairs                    : 1
DefaultQueueVrssQueueSchedulingModeRequested     : StaticVrss
DefaultQueueVrssQueueSchedulingMode              : StaticVrss
DefaultQueueVrssExcludePrimaryProcessorRequested : False
DefaultQueueVrssExcludePrimaryProcessor          : False
SoftwareRscEnabled                               : True
RscOffloadEnabled                                : False
BandwidthPercentage                              : 3
DefaultFlowMinimumBandwidthAbsolute              : 100000000[b][color="#FF0000"]*[/color][/b] 
DefaultFlowMinimumBandwidthWeight                : 0
CimSession                                       : CimSession: .
ComputerName                                     : [color="#FF0000"]HypervisorHostname[/color]
IsDeleted                                        : False

* This was originally 300000000 until I brought it in line with TeamA just in case, but that didn't work

 

Really can't get my head around this one.

Short of rain dances and blood sacrifices, I'm out of ideas.

Edited by Garacesh

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...