Assume there are on-prem and Azure VLAN's paired up, via Azure VPN GW. NLB is configured to run in unicast. All on-prem and Azure VLAN's are added to the NLB configuration.
There are two network interfaces on the Windows Server machine, one for NLB traffic, the other, the default NIC, for the host.
What works, what doesn't:
- Ping from the Azure VM to the NLB VIP, returns nothing. No echo reply.
- Ping from a host running NLB to an Azure VM via this setup works.
- Ping to the NLB's host IP (Not the NLB VIP) from the Azure VM works fine.
- Pinging the NLB VIP from on-prem VLAN's works fine.
- Pinging other machines on the on-prem VLAN's from the Azure VM works fine.
- tcpdump on the Windows Server machine running NLB shows an ICMP ping request arriving at this machine on the NLB interface from the Azure VM, but nothing is returned. No traffic related to the ping appears on the host NIC.
- Tried disabling the F/W. No luck, same result.
- Read through posts about proxy ARP, doesn't appear this is the cause since pinging other on-prem devices from the Azure VM works and NLB is configured with unicast, not multicast.
- Adding the MAC on the NLB host using arp -s <IP> <00-11-22-33-44-55> did not work.
What could be the issue? Could it be something with ESP packets and NLB?