NLB failed to add a multicast MAC address to the network adapter

Microsoft.Windows.NetworkLoadBalancing.2008.NLB.failed.to.add.a.multicast.MAC.address.to.the.network.adapter.it.is.bound.to (Rule)

Knowledge Base article:

Summary

The network adapter to which Network Load Balancing (NLB) is bound must be properly configured and capable of performing NLB operations. If the adapter is not properly configured, the NLB driver may fail to bind to the adapter.

Resolutions

Change network adapter or operate NLB in unicast mode

Since the network adapter has reached the maximum number of multicast MAC addresses that can be assigned to it, you can either change the network adapter to one that supports more multicast MAC addresses, or use Network Load Balancing (NLB) Manager to change the NLB operation mode to unicast mode.

To change the cluster operation mode to unicast:

 

Element properties:

TargetMicrosoft.Windows.NetworkLoadBalancing.2008.ServerRole
CategoryAlert
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.NetworkLoadBalancing.EventProvider Default
WA WriteAction Microsoft.Windows.NetworkLoadBalancing.2008.GenerateAlert.SuppressByDescription Default
WriteToDB WriteAction Microsoft.Windows.NetworkLoadBalancing.2008.CollectEvent Default

Source Code:

<Rule ID="Microsoft.Windows.NetworkLoadBalancing.2008.NLB.failed.to.add.a.multicast.MAC.address.to.the.network.adapter.it.is.bound.to" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.NetworkLoadBalancing.2008.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="NLBLibrary!Microsoft.Windows.NetworkLoadBalancing.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>50</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.Windows.NetworkLoadBalancing.2008.GenerateAlert.SuppressByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.NetworkLoadBalancing.2008.NLB.failed.to.add.a.multicast.MAC.address.to.the.network.adapter.it.is.bound.to.AlertMessage"]$</AlertMessageId>
<EnableAlert>true</EnableAlert>
</WriteAction>
<WriteAction ID="WriteToDB" TypeID="Microsoft.Windows.NetworkLoadBalancing.2008.CollectEvent">
<CollectEvent>false</CollectEvent>
</WriteAction>
</WriteActions>
</Rule>