Regarding the very first point. i want some clarification.
We have an NLB environment set with following properties:
NLB Cluster Name: psnlb.domain.corp.xxx.com
machine 1 in the cluster a1.domain.corp.xxx.com
machine 2 in the cluster a2.domain.corp.xxx.com
we have manually entered a dns record for psnlb.domain.corp.xxx.com to a static IP for resolution and nlb environment works fine
Now, we have AD FS deployment in the above environment
Since, we need to deploy AD FS as a Farm, we use Fsconfig.exe to createSQLFarm and JoinSQLFarm to add the federation servers
so, on machine 1 (a1.domain.corp.xxx.com) and machine 2(a2.domain.corp.xxx.com) respectively Fsconfig.exe /CreateSQLFarm ..../FederationServiceName=psnlb.domain.corp.microsoft.com
Fsconfig.exe /JoinSQLFarm ....../FederationServiceName=psnlb.domain.corp.microsoft.com
Is this correct? i know we have to give Federation Service Name exactly as the DNS Name fo the Cluster....but i want to confirm it with you
Correct, the Federation Service Name must equal the DNS name of the load balance. Take a network trace from a client and watch the Kerberos service ticket request (assuming this is an internal client capable of Kerberos authentication to the internal Federation Service).