I have a MS NLB cluster (Win 2003) which includes just two hosts. The cluster is configured to use Multicast operation mode (not IGMP).

For some reason I am seeing packets intended for the NLB cluster

Destination: MS-NLB-VirtServer-Multicast_bd:1a:0f:04 (03:ce:bd:1a:0f:04)

landing on all the servers on the LAN. Is it normal? Can something be done to get rid of them? We don't control the switch, but I could ask the guys to tweak it, if I knew what to ask


This is perfectly normal. From a general standpoint, multicast traffic is analogous to broadcast traffic. Multicast traffic is sent to all switch ports. Hosts that aren't interested in the multicast traffic ignore it. In order to "scope" the multicast traffic to only those hosts that are interested you'll need to configure IGMP snooping.


If you don't use IGMP, then the switch doesn't know which ports are members of the multicast group. Therefore, the packets are flooded to all ports. You need to get IGMP turned on and configured with the virtual MAC of the NLB cluster.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.