?
Solved

Netscaler Gateway VPX SNIP/VIP Single DMZ NAT rule Help.

Posted on 2014-10-31
1
Medium Priority
?
1,171 Views
Last Modified: 2016-10-25
I recently purchased a Netscaler Gateway VPX to replace Access Gateway and am having some issues getting it up and running.

I'm running the latest NSVPX Gateway in the DMZ. I have an NSIP that's connected to the internal network and a public routable ip address for the SNIP.

There is a public routable subnet that lives in the DMZ. There is an infrastructure network where all my CTX servers reside.

I've setup a NSIP to be in the same IP range as the infrastructure network
The SNIP is a public IP
I've created a VIP for my VS, which is a public IP

I'm having all sorts of issues with properly setting up NAT rules on a Cisco ASA to get this working. Authentication is being done on the NSVPX, then sent to WI, then the SNIP opens up connections directly to the STA servers (to my understanding)

My issue now is not passing through to the WI. Since WI lives on the inside network, Do I have to make sure that either the WI's private address is sent directly to the NSVPX or i create new NAT rules to change the IP? The WI is currently setup for Gateway Direct.

Once I get to the Netscaler Login page, The login just doesn't work, which means either the WI can't properly authenticate or return the traffic back successfully.

My confusion lies on what kind of traffic does the VIP need to accept or transmit BACK into the internal network. I believe the VIP listens only and the SNIP transmits. If so, then the WI needs to be able to access HTTPS into the VIP address to properly respond to an AUTH request.

Could use a hand on how to properly get this going.

Thanks
0
Comment
Question by:Phipps-IT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
Phipps-IT earned 0 total points
ID: 40428772
It turns out to be nothing on the ASA NAT related. On the Netscaler I needed to enable Mac-Based Forwarding along with making sure I have a SNIP of a private, inside address along with DNS.

Problem solved.
0
Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix policies are the most efficient method to configure and tune XenDesktop environments, allowing organizations to control connection, security and bandwidth settings based on various combinations of users, devices or connection types.  Citrix …
Make the most of your online learning experience.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question