I'm setting up an RDS Web Access infrastructure using Windows 2008 R2 and I'm running into problems with the Connection Broker/Web Access roles. I've created two of each: RDWA, RDCB, RDSH (and RDGW, but that's unrelated to the issue). The two
RDSH servers are in a DNS round-robin farm. The two RDCB servers are in a MSCS failover cluster. The two RDWA servers are behind an F5 BIG-IP VIP. The RDCB and RDSH servers are in the same internal subnet and the RDWA servers are in a DMZ
subnet. I have configured both the RDCB and RDSH servers to use a fixed WMI port to reduce the ports required to be opened between the DMZ and the internal subnet.
I want to configure the RDWA servers to go through the RDCB servers to get the RDSH farm. On the RDWA servers, when I try to configure "An RD Connection Broker server" to point to the cluster service name, I get:
"RD Web Access was not able to contact the RD Connection Broker server specified. Ensure that the RD Connection Broker server name was entered correctly, and that the server is running and available on the network."
If I try to configure the RDWA servers to point directly to the active RDCB server in the cluster by FQDN, I get the same error. If, however, I configure the RDWA servers to point to a RemoteApp source and enter the FQDN of one of the RDSH servers, there are no errors and the RemoteApps appear. Using PowerShell, I have tested performing a manual WMI call from both RDWA severs to both RDCB servers - no problems there. I can also perform the WMI call to the cluster service name. I believe MSCS is working properly - I think something is misconfigured either in Windows or the Connection Broker settings. I have verified the COM Security and WMI Security settings and have ensured both RDWA servers are in the TS Web Access Computers group. I don't see any errors in the event logs when I get the error message above.
Thanks in advance for any assistance or ideas.