Quadeeb2003
asked on
Citrix Presentation Server 4.0 Cannot Connect to the Ctirix Metaframe server / no Citrix server configured on the specified address
I have a Citrix PS 4.0 server running everything on one box.
I can connect internally
I can connect externally (over ip address https://64.... ) on a computer that is on my VPN.
When I try to connect via a computer not on a VPN, I get the message above.
no Citrix Metaframe server configured on the specified address.
any ideas?
I can connect internally
I can connect externally (over ip address https://64.... ) on a computer that is on my VPN.
When I try to connect via a computer not on a VPN, I get the message above.
no Citrix Metaframe server configured on the specified address.
any ideas?
ok rather than launching the application right-click on it and save the file to your desktop... please post the "Address=" line.
ASKER
[Wordpad]
Address=10.0.0.101:1494
AudioBandwidthLimit=2
AutologonAllowed=ON
CGPAddress=*:2598
ClearPassword=AF6474184363 36
ClientAudio=On
DesiredColor=2
DesiredHRES=640
DesiredVRES=480
Domain=\33AD855FB55A5890
InitialProgram=#Wordpad
Launcher=WI
LongCommandLine=
ProxyTimeout=30000
ProxyType=Auto
SSLEnable=Off
SessionsharingKey=2-basic- basic-amsn et-justin- DME
TWIMode=On
TransportDriver=TCP/IP
Does this help?
Address=10.0.0.101:1494
AudioBandwidthLimit=2
AutologonAllowed=ON
CGPAddress=*:2598
ClearPassword=AF6474184363
ClientAudio=On
DesiredColor=2
DesiredHRES=640
DesiredVRES=480
Domain=\33AD855FB55A5890
InitialProgram=#Wordpad
Launcher=WI
LongCommandLine=
ProxyTimeout=30000
ProxyType=Auto
SSLEnable=Off
SessionsharingKey=2-basic-
TWIMode=On
TransportDriver=TCP/IP
Does this help?
>> 10.0.0.101:1494
see this is the problem. When not on the LAN and not on a VPN (virtual LAN) your computer will NOT be able to communicate with this private address.
Open the Access Suite Console again and go to Manage Secure Client Access > Edit DMZ Settings
Post the details of the rules you have configured there.
see this is the problem. When not on the LAN and not on a VPN (virtual LAN) your computer will NOT be able to communicate with this private address.
Open the Access Suite Console again and go to Manage Secure Client Access > Edit DMZ Settings
Post the details of the rules you have configured there.
ASKER
I have
client ip address mask access method
default secure gateway direct
10.0.0.101 255.255.255.0 Direct
client ip address mask access method
default secure gateway direct
10.0.0.101 255.255.255.0 Direct
ASKER
I am guessing we are going to make a new translation, and then reference it in the DMZ settings?
yea we might have to... what is the local IP Address range of the computer you were testing with?
if it is in the same range as your LAN (10.0.0.x) then it's not going to work because your web interface is detecting that and thinking the computer is on the LAN when it's really not. Try removing that 2nd rule and connecting from the outside and see if it works. Your default connection (the secure gateway) actually should work from any location.
if it is in the same range as your LAN (10.0.0.x) then it's not going to work because your web interface is detecting that and thinking the computer is on the LAN when it's really not. Try removing that 2nd rule and connecting from the outside and see if it works. Your default connection (the secure gateway) actually should work from any location.
ASKER
OK, this is disapointing. I tried removing the second line, and no luck with either WAN (over VPN) or LAN. The Notepad application does not start, and in fact does not even give me an error on the WAN, on the LAN I get a red circle with a white X: ERROR: An error has occurred while connecting to the requested resource.
My alt site VPN LAN 10.0.10.x
the other sites are default for the routers 192.168.1.*
The only thing I changed on the system was the attempt to get the install to go when people log in (Other Question Option 2). I did as prescribed and restarted the IIS. I'll check that question again.
My alt site VPN LAN 10.0.10.x
the other sites are default for the routers 192.168.1.*
The only thing I changed on the system was the attempt to get the install to go when people log in (Other Question Option 2). I did as prescribed and restarted the IIS. I'll check that question again.
ASKER
Also, when connected from the LAN now after log in, i get a security information alert / this page contains both secure and non secure items. Do you want to dispay nonsecure items?, yes, no,
ASKER
Alright, fixed logging problems over LAN and WAN, like an idiot I pressed 'repair database'.
Seemed to lose everything, had to build a new WI and I got LAN and VPN connection up.
Still trying to get internet connection up when not on VPN.
Seemed to lose everything, had to build a new WI and I got LAN and VPN connection up.
Still trying to get internet connection up when not on VPN.
ok can you tell me which connection you are using when connecting from LAN or VPN? (again use the steps I posted in the very first comment).
For it to work correctly over the internet the launch.ica file will look like this:
[Wordpad]
Address=STA;3K4J324K3432KJ 432J4324K3
...
basically a bunch of jumbled characters.
I think what is happening is that when connecting from your remote site it (without VPN) it is still trying to use the 2nd Access rule because of your local IP Address. Are you able to test a connection from another site where the local IP address does not use the 10.0.10.x mask?
For it to work correctly over the internet the launch.ica file will look like this:
[Wordpad]
Address=STA;3K4J324K3432KJ
...
basically a bunch of jumbled characters.
I think what is happening is that when connecting from your remote site it (without VPN) it is still trying to use the 2nd Access rule because of your local IP Address. Are you able to test a connection from another site where the local IP address does not use the 10.0.10.x mask?
ASKER
I think what I need to do is get the WI an alternate IP address, and get it in a DMZ. I purchased a router that can accomplish this, but I won't get it for a bit. All the articles/posts I have been reading are pushing me down that path.
but, from my house right now
[Wordpad]
Address=10.0.0.101:1494 (does not work - no VPN) LAN 192.168.1.x
from my LA office (VPN) LAN 10.0.10.x
[Wordpad]
Address=10.0.0.101:1494
From my office desktop LAN 10.0.0.x
[Wordpad]
Address=10.0.0.101:1494
At this point though I would like to do this just because...there has to be a way.
but, from my house right now
[Wordpad]
Address=10.0.0.101:1494 (does not work - no VPN) LAN 192.168.1.x
from my LA office (VPN) LAN 10.0.10.x
[Wordpad]
Address=10.0.0.101:1494
From my office desktop LAN 10.0.0.x
[Wordpad]
Address=10.0.0.101:1494
At this point though I would like to do this just because...there has to be a way.
ASKER
Ok, I tried to telnet port 1494 from all three locations, and of course my home does not get the ICA response, but the other two do.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
ok, I have my router port 1494 open and pointing the the ip address of the web interface.
I ran teh altadd /set command and I see the alt address listed
my default connection is now alternate, instead of Secure Gateway Direct
But I still cannot get the app to run
I ran teh altadd /set command and I see the alt address listed
my default connection is now alternate, instead of Secure Gateway Direct
But I still cannot get the app to run
are you getting the right IP address in the launch.ica file? It should now show the external IP address
ASKER
No, but that might have something to do with the fact that I created a new interface. Before, If i just typed in the https://xxx.xxx.xxx.xxx, i got the site, now, it gives me this site is under construction. On the computers I was trying from before the path was already in the Internet explorer, and it filled in the citrix/metaframe portion. That could be part of my problem, or not.
But to answer your question, no I did not manage to get the other address in there.
But to answer your question, no I did not manage to get the other address in there.
ASKER
mgcIT Please check my new open question