LuiLui77
asked on
Citrix netscaler connection to Web Interface
Hello All,
I am fairly new to Citrix and have been task to document a Citrix environment.
Our environment consist of a Web Interface were the services as Applications and virtual desktops are published and a Netscaler to route the incoming traffic to the Web interface.
My question is,
- Where can I find the connection string (if there is any) in the Netscaler that redirects the traffic to the Web Interfaces machines?
We have been browsing the Netscaler console and have not found anything where this is configured.
- Also, our environment is setup with Windows Authentication, meaning that we can log into the Web interface with our Windows creds. Where and how is this configured?
Any explanations or documents about these questions will be greatly appreciated!
I am fairly new to Citrix and have been task to document a Citrix environment.
Our environment consist of a Web Interface were the services as Applications and virtual desktops are published and a Netscaler to route the incoming traffic to the Web interface.
My question is,
- Where can I find the connection string (if there is any) in the Netscaler that redirects the traffic to the Web Interfaces machines?
We have been browsing the Netscaler console and have not found anything where this is configured.
- Also, our environment is setup with Windows Authentication, meaning that we can log into the Web interface with our Windows creds. Where and how is this configured?
Any explanations or documents about these questions will be greatly appreciated!
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Paul and dkotte, thank you for all this info.
We have Web Interface and not Storefront. I am not sure if this info will change anything.
Please let me know.
Thanks!
We have Web Interface and not Storefront. I am not sure if this info will change anything.
Please let me know.
Thanks!
You'd have a few options with the Netscaler & Web Interface --
1. Straight load balancing through the Netscaler (even if it is only a single server)
2. Running the Web Interface site directly on the Netscaler (applies to older NS code)
3. Running the Web Interface directly on the internet/firewall bypassing the Netscaler
The easiest thing to do is look at the running config as dkotte mentioned, and look at the running config. Assuming your running config has been saved & not changed, you can use any SFTP client (i.e FileZilla) and get a copy of the ns.conf file (The location varies with the code version, but it is generally /flash/nsconfig or /nsconfig).
Search this plain text config file for the IP address of your Web Interface site, and it will give you a clue as to if/where it is referenced. If it is not there, then you know you are bypassing the Netscaler.
Also, check your SSL directories on the Netscaler for the certificates for your Web Interface site (again, location varies, but typically /flash/nsconfig/ssl or /nsconfig/ssl). That will also help you identify if your WI is being handled through the NS.
As for the authentication, the WI authentication piece is configured in the Web Interface management console. Check the docs for WI - http://docs.citrix.com/con
Coralon
1. Straight load balancing through the Netscaler (even if it is only a single server)
2. Running the Web Interface site directly on the Netscaler (applies to older NS code)
3. Running the Web Interface directly on the internet/firewall bypassing the Netscaler
The easiest thing to do is look at the running config as dkotte mentioned, and look at the running config. Assuming your running config has been saved & not changed, you can use any SFTP client (i.e FileZilla) and get a copy of the ns.conf file (The location varies with the code version, but it is generally /flash/nsconfig or /nsconfig).
Search this plain text config file for the IP address of your Web Interface site, and it will give you a clue as to if/where it is referenced. If it is not there, then you know you are bypassing the Netscaler.
Also, check your SSL directories on the Netscaler for the certificates for your Web Interface site (again, location varies, but typically /flash/nsconfig/ssl or /nsconfig/ssl). That will also help you identify if your WI is being handled through the NS.
As for the authentication, the WI authentication piece is configured in the Web Interface management console. Check the docs for WI - http://docs.citrix.com/con
Coralon
What version of NetScaler and xendesktop do you have?
I assumed since you were tasked with designing a Citrix environment that these were going to be new products.
I assumed since you were tasked with designing a Citrix environment that these were going to be new products.
ASKER
Thank you Coralon, I will be checking into this as well!
And I can strongly recommend Carl Webster's documentation scripts. I've helped test some of them, I've certainly used them, and they are very well worth the time.
http://carlwebster.com/
Coralon
http://carlwebster.com/
Coralon
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you All!
there you see the different configurations.
below "virtual server" you see the reachable virtual server and all his configuration.
also you can take a look to the cli-config.
look at config / system / diagnostic within the gui or open a connection with putty and use "show config"