Link to home
Start Free TrialLog in
Avatar of Quadeeb2003
Quadeeb2003

asked on

Citrix Presentation Server 4.0 Cannot Connect to the Ctirix Metaframe server / no Citrix server configured on the specified address

I have a Citrix PS 4.0 server running everything on one box.
I can connect internally
I can connect externally (over ip address https://64.... ) on a computer that is on my VPN.
When I try to connect via a computer not on a VPN, I get the message above.

no Citrix Metaframe server configured on the specified address.


any ideas?
Avatar of mgcIT
mgcIT
Flag of United States of America image

ok rather than launching the application right-click on it and save the file to your desktop... please post the "Address=" line.
Avatar of Quadeeb2003
Quadeeb2003

ASKER

[Wordpad]
Address=10.0.0.101:1494
AudioBandwidthLimit=2
AutologonAllowed=ON
CGPAddress=*:2598
ClearPassword=AF647418436336
ClientAudio=On
DesiredColor=2
DesiredHRES=640
DesiredVRES=480
Domain=\33AD855FB55A5890
InitialProgram=#Wordpad
Launcher=WI
LongCommandLine=
ProxyTimeout=30000
ProxyType=Auto
SSLEnable=Off
SessionsharingKey=2-basic-basic-amsnet-justin-DME
TWIMode=On
TransportDriver=TCP/IP

Does this help?
>> 10.0.0.101:1494

see this is the problem.  When not on the LAN and not on a VPN (virtual LAN) your computer will NOT be able to communicate with this private address.

Open the Access Suite Console again and go to Manage Secure Client Access > Edit DMZ Settings

Post the details of the rules you have configured there.
I have
client ip address           mask          access method
default                                                secure gateway direct
10.0.0.101                 255.255.255.0             Direct
I am guessing we are going to make a new translation, and then reference it in the DMZ settings?
yea we might have to... what is the local IP Address range of the computer you were testing with?

if it is in the same range as your LAN (10.0.0.x) then it's not going to work because your web interface is detecting that and thinking the computer is on the LAN when it's really not.  Try removing that 2nd rule and connecting from the outside and see if it works.  Your default connection (the secure gateway) actually should work from any location.
OK, this is disapointing.  I tried removing the second line, and no luck with either WAN (over VPN)  or LAN.  The Notepad application does not start, and in fact does not even give me an error on the WAN, on the LAN I get a red circle with a white X: ERROR: An error has occurred while connecting to the requested resource.

My alt site VPN LAN 10.0.10.x
the other sites are default for the routers 192.168.1.*


The only thing I changed on the system was the attempt to get the install to go when people log in (Other Question Option 2).  I did  as prescribed and restarted the IIS.  I'll check that question again.
Also, when connected from the LAN now after log in, i get a security information alert / this page contains both secure and non secure items. Do you want to dispay nonsecure items?, yes, no,
Alright, fixed logging problems over LAN and WAN, like an idiot I pressed 'repair database'.
Seemed to lose everything, had to build a new WI and I got LAN and VPN connection up.

Still trying to get internet connection up when not on VPN.
ok can you tell me which connection you are using when connecting from LAN or VPN?  (again use the steps I posted in the very first comment).

For it to work correctly over the internet the launch.ica file will look like this:

[Wordpad]
Address=STA;3K4J324K3432KJ432J4324K3  
...
basically a bunch of jumbled characters.

I think what is happening is that when connecting from your remote site it (without VPN) it is still trying to use the 2nd Access rule because of your local IP Address.  Are you able to test a connection from another site where the local IP address does not use the 10.0.10.x mask?
I think what I need to do is get the WI an alternate IP address, and get it in a DMZ.  I purchased a router that can accomplish this, but I won't get it for a bit.  All the articles/posts I have been reading are pushing me down that path.

but, from my house right now
[Wordpad]
Address=10.0.0.101:1494 (does not work - no VPN) LAN 192.168.1.x
from my LA office (VPN) LAN 10.0.10.x
[Wordpad]
Address=10.0.0.101:1494
From my office desktop   LAN 10.0.0.x
[Wordpad]
Address=10.0.0.101:1494

At this point though I would like to do this just because...there has to be a way.
Ok, I tried to telnet port 1494 from all three locations, and of course my home  does not get the ICA response, but the other two do.
ASKER CERTIFIED SOLUTION
Avatar of mgcIT
mgcIT
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ok, I have my router port 1494 open and pointing the the ip address of the web interface.
I ran teh altadd /set command and I see the alt address listed
my default connection is now alternate, instead of Secure Gateway Direct

But I still cannot get the app to run
are you getting the right IP address in the launch.ica file?  It should now show the external IP address
No, but that might have something to do with the fact that I created a new interface.  Before, If i just typed in the https://xxx.xxx.xxx.xxx, i got the site, now, it gives  me this site is under construction.  On the computers I was trying from before the path was already in the Internet explorer, and it filled in the citrix/metaframe portion.  That could be part of my problem, or not.
But to answer your question, no I did not manage to get the other address in there.
mgcIT Please check my new open question