Jump to content
Welcome to our new Citrix community!

NetProfile with Citrix Access Gateway - citrix document not clear.


Smrutimaya Mohanty

Recommended Posts

Hi Experts,

 

On this link - https://docs.citrix.com/en-us/citrix-gateway/current-release/install-citrix-gateway/configure-citrix-gateway-settings/create-gateway-virtual-servers.html#points-to-note-when-binding-a-net-profile-to-the-vpn-virtual-server - it's explained how netprofile behaves, when we tie it to a CAG. I am confused on the point 1, what does it mean when it says that - 

 

"When you bind a net profile to a Citrix Gateway virtual server, the net profile does not select a specific SNIP to be used by the virtual server or service for the traffic to back-end servers. Instead, the gateway appliance ignores the net profile binding and uses the round robin method for selecting the SNIPs."

 

==

 

Also, would like to know, how PBR gets processed in presence of a netprofile.

Link to comment
Share on other sites

On 12/31/2021 at 1:45 PM, Smrutimaya Mohanty said:

Hi Experts,

 

On this link - https://docs.citrix.com/en-us/citrix-gateway/current-release/install-citrix-gateway/configure-citrix-gateway-settings/create-gateway-virtual-servers.html#points-to-note-when-binding-a-net-profile-to-the-vpn-virtual-server - it's explained how netprofile behaves, when we tie it to a CAG. I am confused on the point 1, what does it mean when it says that - 

 

"When you bind a net profile to a Citrix Gateway virtual server, the net profile does not select a specific SNIP to be used by the virtual server or service for the traffic to back-end servers. Instead, the gateway appliance ignores the net profile binding and uses the round robin method for selecting the SNIPs."

 

This means that you can bind a netprofile to a gateway but it will never be used / get ignored ?

You can set a "NAT IP Address" to change the SNIP used for the authentication traffic: set aaa parameter -aaadnatIp <ip_addr>

 

  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...