Link to home
Start Free TrialLog in
Avatar of GreshAssoc
GreshAssocFlag for United States of America

asked on

Citrix Netscaler cant assign requested address

xenapp 6.5 enviro. Netscaler VPX (5).  Have entrust root, chain, and server certificates installed, linked, and verified.  can connect locally through the netscaler virtual server without issue (logging into the virtual server from the LAN).  Login, can see and access published desktop as well as published apps. When accessing through the external address though, i can log in and get all the way to the point of opening the desktop or apps and receive the error: "Unable to launch your application, cannot connect to Citrix Xenapp server. Can't assign requested address".  SSL is showing valid from the remote computer.  

The Netscaler is setup on the LAN side of my firewall, i have not moved it to the DMZ yet so LDAP and Citrix servers are all local.  ports opened on firewall pointing to the virtual server only are 80,443,8080,2598,546-547,as well as 1494-1604 (this span will be corrected later).
Avatar of GreshAssoc
GreshAssoc
Flag of United States of America image

ASKER

as a test i created two add'l service objects on the firewall - opening udp ports 1-65000 and tcp ports 1-65000 and applied them to the netscaler firewall policy.  Same error, so this doesnt appear to be a firewall issue.
SOLUTION
Avatar of Dirk Kotte
Dirk Kotte
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
sorry for the delay.  some other items took priority, but i am back at this now.
Using a webinterface from a windows server.  the netscaler is pointed to a specific server / sta.  WI on that server and sta are working.  when i attempt to access this from a mac i get a different result:  Cannot connect, the server "random farm server.com:1494" cannot be found on the network.  as i continue to attempt to launch it will cycle through every one of my farm servers.  i have verified 1494 is open and is getting an ICA response via telnet.  i have also opened a range of ip addresses covering all of my farm servers for 1494 & 2598.  the netscaler itself is open on 80, 8080, and 443.  the ica log file is attached.  the netscaler is new to me so i am not sure if there should be a server or site name under [applicationservers] desktop=  
Also, due to the number of servers in the farm i could not successfully pull a netstat, i suppose i can build a test farm with a single server for that.

..update- from looking at my internal ica file it does not list an app server either, so i guess it is not needed

--------------------------------------------------------------------------------------------------
Connecting using ICA File (Server: Desktop)
[ApplicationServers]
Desktop=

[Compress]
DriverNameWin32=pdcompn.dll
DriverNameWin16=pdcompw.dll

[Desktop]
Address=citrix65vm0.removed.com:1494
AutologonAllowed=ON
BrowserProtocol=HTTPonTCP
CGPAddress=*:2598
ClientAudio=On
DesiredColor=4
DesiredHRES=4294967295
DesiredVRES=4294967295
DoNotUseDefaultCSL=On
FontSmoothingType=0
InitialProgram=#Desktop
LaunchReference=ZwBW/+oSrWWu9lP6Gst2As7UJ2hdyrLIbPoWwIaYTZk=
Launcher=WI
LocHttpBrowserAddress=!
LongCommandLine=
LPWD=6
NRWD=22
ProxyType=Auto
ProxyTimeout=30000
SessionsharingKey=-uJs60MoI96xZAfPC6oxfmq
SFRAllowed=Off
SSLEnable=Off
StartIFDCD=1391796631093
StartSCD=1391796631093
Title=Desktop
TransportDriver=TCP/IP
TWIMode=Off
UILocale=en
UseLocalUserAndPassword=On
WinStationDriver=ICA 3.0

[Encoding]
InputEncoding=UTF8

[EncRC5-0]
DriverNameWin32=pdc0n.dll
DriverNameWin16=pdc0w.dll

[EncRC5-128]
DriverNameWin32=pdc128n.dll
DriverNameWin16=pdc128w.dll

[EncRC5-40]
DriverNameWin32=pdc40n.dll
DriverNameWin16=pdc40w.dll

[EncRC5-56]
DriverNameWin32=pdc56n.dll
DriverNameWin16=pdc56w.dll

[WFClient]
CPMAllowed=On
ProxyTimeout=30000
ProxyType=Auto
ProxyUseFQDN=Off
ProxyFavorIEConnectionSetting=Yes
RemoveICAFile=yes
TransportReconnectEnabled=On
TransparentKeyPassthrough=FullScreenOnly
Version=2
VirtualCOMPortEmulation=Off
VSLAllowed=On

Connecting using ICA File (Server: Desktop)
[ApplicationServers]
Desktop=

[Compress]
DriverNameWin32=pdcompn.dll
DriverNameWin16=pdcompw.dll

[Desktop]
Address=citrix65vm0.removed.com:1494
AutologonAllowed=ON
BrowserProtocol=HTTPonTCP
CGPAddress=*:2598
ClientAudio=On
DesiredColor=4
DesiredHRES=4294967295
DesiredVRES=4294967295
DoNotUseDefaultCSL=On
FontSmoothingType=0
InitialProgram=#Desktop
LaunchReference=ZwBW/+oSrWWu9lP6Gst2As7UJ2hdyrLIbPoWwIaYTZk=
Launcher=WI
LocHttpBrowserAddress=!
LongCommandLine=
LPWD=6
NRWD=22
ProxyType=Auto
ProxyTimeout=30000
SessionsharingKey=-uJs60MoI96xZAfPC6oxfmq
SFRAllowed=Off
SSLEnable=Off
StartIFDCD=1391796631093
StartSCD=1391796631093
Title=Desktop
TransportDriver=TCP/IP
TWIMode=Off
UILocale=en
UseLocalUserAndPassword=On
WinStationDriver=ICA 3.0

[Encoding]
InputEncoding=UTF8

[EncRC5-0]
DriverNameWin32=pdc0n.dll
DriverNameWin16=pdc0w.dll

[EncRC5-128]
DriverNameWin32=pdc128n.dll
DriverNameWin16=pdc128w.dll

[EncRC5-40]
DriverNameWin32=pdc40n.dll
DriverNameWin16=pdc40w.dll

[EncRC5-56]
DriverNameWin32=pdc56n.dll
DriverNameWin16=pdc56w.dll

[WFClient]
CPMAllowed=On
ProxyTimeout=30000
ProxyType=Auto
ProxyUseFQDN=Off
ProxyFavorIEConnectionSetting=Yes
RemoveICAFile=yes
TransportReconnectEnabled=On
TransparentKeyPassthrough=FullScreenOnly
Version=2
VirtualCOMPortEmulation=Off
VSLAllowed=On

Connecting using ICA File (Server: Desktop)
[ApplicationServers]
Desktop=

[Compress]
DriverNameWin32=pdcompn.dll
DriverNameWin16=pdcompw.dll

[Desktop]
Address=citrix65vm0.removed.com:1494
AutologonAllowed=ON
BrowserProtocol=HTTPonTCP
CGPAddress=*:2598
ClientAudio=On
DesiredColor=4
DesiredHRES=4294967295
DesiredVRES=4294967295
DoNotUseDefaultCSL=On
FontSmoothingType=0
InitialProgram=#Desktop
LaunchReference=ZwBW/+oSrWWu9lP6Gst2As7UJ2hdyrLIbPoWwIaYTZk=
Launcher=WI
LocHttpBrowserAddress=!
LongCommandLine=
LPWD=6
NRWD=22
ProxyType=Auto
ProxyTimeout=30000
SessionsharingKey=-uJs60MoI96xZAfPC6oxfmq
SFRAllowed=Off
SSLEnable=Off
StartIFDCD=1391796631093
StartSCD=1391796631093
Title=Desktop
TransportDriver=TCP/IP
TWIMode=Off
UILocale=en
UseLocalUserAndPassword=On
WinStationDriver=ICA 3.0

[Encoding]
InputEncoding=UTF8

[EncRC5-0]
DriverNameWin32=pdc0n.dll
DriverNameWin16=pdc0w.dll

[EncRC5-128]
DriverNameWin32=pdc128n.dll
DriverNameWin16=pdc128w.dll

[EncRC5-40]
DriverNameWin32=pdc40n.dll
DriverNameWin16=pdc40w.dll

[EncRC5-56]
DriverNameWin32=pdc56n.dll
DriverNameWin16=pdc56w.dll

[WFClient]
CPMAllowed=On
ProxyTimeout=30000
ProxyType=Auto
ProxyUseFQDN=Off
ProxyFavorIEConnectionSetting=Yes
RemoveICAFile=yes
TransportReconnectEnabled=On
TransparentKeyPassthrough=FullScreenOnly
Version=2
VirtualCOMPortEmulation=Off
VSLAllowed=On

Connecting using ICA File (Server: Desktop)
[ApplicationServers]
Desktop=

[Compress]
DriverNameWin32=pdcompn.dll
DriverNameWin16=pdcompw.dll

[Desktop]
Address=citrix65vm0.removed.com:1494
AutologonAllowed=ON
BrowserProtocol=HTTPonTCP
CGPAddress=*:2598
ClientAudio=On
DesiredColor=4
DesiredHRES=4294967295
DesiredVRES=4294967295
DoNotUseDefaultCSL=On
FontSmoothingType=0
InitialProgram=#Desktop
LaunchReference=ZwBW/+oSrWWu9lP6Gst2As7UJ2hdyrLIbPoWwIaYTZk=
Launcher=WI
LocHttpBrowserAddress=!
LongCommandLine=
LPWD=6
NRWD=22
ProxyType=Auto
ProxyTimeout=30000
SessionsharingKey=-uJs60MoI96xZAfPC6oxfmq
SFRAllowed=Off
SSLEnable=Off
StartIFDCD=1391796631093
StartSCD=1391796631093
Title=Desktop
TransportDriver=TCP/IP
TWIMode=Off
UILocale=en
UseLocalUserAndPassword=On
WinStationDriver=ICA 3.0

[Encoding]
InputEncoding=UTF8

[EncRC5-0]
DriverNameWin32=pdc0n.dll
DriverNameWin16=pdc0w.dll

[EncRC5-128]
DriverNameWin32=pdc128n.dll
DriverNameWin16=pdc128w.dll

[EncRC5-40]
DriverNameWin32=pdc40n.dll
DriverNameWin16=pdc40w.dll

[EncRC5-56]
DriverNameWin32=pdc56n.dll
DriverNameWin16=pdc56w.dll

[WFClient]
CPMAllowed=On
ProxyTimeout=30000
ProxyType=Auto
ProxyUseFQDN=Off
ProxyFavorIEConnectionSetting=Yes
RemoveICAFile=yes
TransportReconnectEnabled=On
TransparentKeyPassthrough=FullScreenOnly
Version=2
VirtualCOMPortEmulation=Off
VSLAllowed=On
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Gateway direct was the issue, set up secondary WI and recreated the virtual server and all is well.