Link to home
Start Free TrialLog in
Avatar of somoteitbe
somoteitbeFlag for United States of America

asked on

There is no Citrix Metaframe server configured on the specified address

I am responsible for a Citrix server that was configured by an outside company which is increasingly difficult to contact.  I'm concerned with the inability of users to connect from the outside into published applications there.  Users are able to log into the web interface, but when trying to launch apps, it return the error "There is no Citrix Metaframe server configured on the specified address" and the connection fails.  I am new to the world of Citrix and I am an average systems administrator.  A little help from a seasoned Citrix admin would be greatly appreciated.
Avatar of AdamBNYC
AdamBNYC

There could be a few things. First, check the Citrix Access Management console and head into the web interface. Right click on your web interface website and access the "manage secure client access", then Edit DMZ settings.

You must make sure this is correct depending on how your external users are accessing your web interface. Are they coming through a secure gateway or a CAG?

You must also make sure that you set the alt addr on the citrix server. to do this, do the following

go into CMD on the citrix server
Type, Altaddr  and the external address of the web interface. For instance. If your using a public ip address of 69.20.32.50 for the web interface, you would type

altaddr 69.20.32.50

What this does, it instructs the server to deliver the public IP address as opposed to the private inside address for connection through the web interface.

One thing you should check is the following also:

right click on a pubished application on the web interface and save the target. Edit the file you saved and check to see what address was returned. let me know how it goes from there.
Avatar of somoteitbe

ASKER

Thanks fro the quick response...

To address your question regarding Secure Gateway and a CAG -  I'm not sure if I am using the secure gateway or CAG because I'm not entirely sure what a CAG is and becasue some network equipment was shuffled around and this office lost its Juniper SA2000 which I believe used to provision some access to this server.  This is aboutthe same time users began not being able to access published apps.  I have no DMZ in place for this office and that I have a reserved public address just for this Citrix box.

Just for shegrins, it may also serve you as some point to know that this is an x64 box.  

So, I executed the command "altaddr 24.x.x.x /set" and logged back into the web interface from outside to save the target and evaluate.  The address being given in the file is a private LAN address (10.XX.X).  Here's the output (I've made domain, user and IP's generic):

[Encoding]
InputEncoding=ISO8859_1
[WFClient]
ClientName=DOMAIN.COM-USER
ProxyFavorIEConnectionSetting=Yes
ProxyTimeout=30000
ProxyType=Auto
ProxyUseFQDN=Off
RemoveICAFile=yes
TransparentKeyPassthrough=Local
TransportReconnectEnabled=On
Version=2
VirtualCOMPortEmulation=Off
[ApplicationServers]
PERC OFFICE=
[PERC OFFICE]
Address=10.X.X.X:1494
AutologonAllowed=ON
CGPAddress=*:2598
ClearPassword=A560DD6B5B8DCC
ClientAudio=Off
DesiredColor=8
DesiredHRES=1280
DesiredVRES=1024
Domain=\D33201723A19CD34
InitialProgram=#PERC OFFICE
Launcher=WI
LongCommandLine=
ProxyTimeout=30000
ProxyType=Auto
SSLEnable=Off
SessionsharingKey=8-basic-none-domain.com-user-FARM_NAME
TWIMode=On
TransportDriver=TCP/IP
Username=man
WinStationDriver=ICA 3.0
[Compress]
DriverNameWin16=pdcompw.dll
DriverNameWin32=pdcompn.dll
[EncRC5-0]
DriverNameWin16=pdc0w.dll
DriverNameWin32=pdc0n.dll
[EncRC5-128]
DriverNameWin16=pdc128w.dll
DriverNameWin32=pdc128n.dll
[EncRC5-40]
DriverNameWin16=pdc40w.dll
DriverNameWin32=pdc40n.dll
[EncRC5-56]
DriverNameWin16=pdc56w.dll
DriverNameWin32=pdc56n.dl
ok, as long as the Altddr is set, your issue is probably the DMZ settings. What does it say under these settings? Just it just say Default direct? You would need to reconfigure this. As your internal is returning a 10.x.x.x network, you should configure your DMZ settings as so

Edit the default and make this alternate
Add in a new rule that states

Access method Direct
10.0.0.0
255.255.0.0

That should be good enough. Let me know what it says and we'll go forward.
With the loss of the juniper device, it sounds to me like your users were using a VPN, once they connected via VPN, then yes, your current config would have worked fine.
I suppose it is possible that they were conencting via VPN, thoguh that wasn't my impression.  Good call.  So, you were correct about the DMZ settings being default and I made changes as you said - the default is now set to alternate and I added the LAN address and mask for the presentation server as Direct.  With 10.0.0.0, am I intending to specify the subnet or the host address?  I assume you mean the host address and mask, yes? If so, it is set as such.

Testing failed again, however.  Same error message.  Where can we go from here?
You should be specifying the subnet, not the IP address of the server. basically what you are saying with this rule is the following

Default - alternate = Always return the alternate address (the public altaddr address )
Direct = 10.0.0.0/255.255.0.0 = Any client originating from a 10.0.x.x return the internal address of the citrix server.
Also, if you want to setup a gotoassist session, I work for a pretty well known company and would be happy to help. You can email me directly at AdamBNYC@Gmail.com and we can go from there.
I got all that set up and now I understand that all I need to do is get a CSG set up and configured and I'll be good to go.  

I also learned (thanks to a good pal) that I didn't have admin permissions in the Citrix instance which I obtained through the proper channels.  At least now I'm getting the correct address passed off to the clients in the launch.ica file.

Should have the whole kit & kaboodle once CSG is configured right.  Do you know where to start for that one??  That's new to me as well.
Since my Citrix box is x64, does the server I use for my CSG also need to be x64?
No, i dont think 64bit is required.
ASKER CERTIFIED SOLUTION
Avatar of AdamBNYC
AdamBNYC

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for the advice - this has really gotten me onto the right path.  I'm onto finish up, but the CSG was definitely the answer I was looking for.  Thanks for the help!