Carl Stalhood
-
Posts
26 -
Joined
-
Last visited
Carl Stalhood's Achievements
-
HA between separate hardware models is not supported because the NICs are different. But some have reported success.
-
The newer models only support 13.1 firmware. Here's one method of migrating - https://www.carlstalhood.com/migrate-citrix-adc-config-to-new-adc-appliances/
-
MBF (Mac Based Forwarding) will send replies to the same MAC/interface/VLAN that the request came from. For Layer 3 outbound routing, NetScaler will use a SNIP on the same subnet as the next hop gateway/router. Add routes to the routing table. Another option is PBRs for traffic that have particular VIPs are source IP.
-
Each object is removed separately. Some of the objects can be shared by multiple vServers so you don't want deletion of one vServer to affect objects being used by other vServers.
-
How to disbale a vserver and servicegroup from CLI ?
Carl Stalhood replied to Sarovani CK's topic in Core ADC use cases
See https://developer-docs.netscaler.com/en-us/adc-command-reference-int/current-release/lb/lb-vserver.html#set-lb-vserver There's a disable command. And the set command has -state disabled. -
My Citrix Gateway 13.1 nFactor auth config is as follows • 1st factor – No Schema and SAML Action • 2nd factor – No schema and LDAP Action. • MFA Pingfederate : IDP & SP. Gateway 13.1 • How to SSON pass credential to the VDA without FAS
Carl Stalhood replied to Raphael Pemberton's topic in Core ADC use cases
Does your nFactor ask for user password? If so, send the user's password to StoreFront. If not, and if you don't enable FAS, then the VDA will ask the user to enter the user's password. This is separate from any password prompt at your IdP. StoreFront can show a user's icons even if the StoreFront never received the user's password because StoreFront can rely on the Gateway Callback. -
My Citrix Gateway 13.1 nFactor auth config is as follows • 1st factor – No Schema and SAML Action • 2nd factor – No schema and LDAP Action. • MFA Pingfederate : IDP & SP. Gateway 13.1 • How to SSON pass credential to the VDA without FAS
Carl Stalhood replied to Raphael Pemberton's topic in Core ADC use cases
Does your nFactor ask for user password? If so, send the user's password to StoreFront. If not, and if you don't enable FAS, then the VDA will ask the user to enter the user's password. This is separate from any password prompt at your IdP. -
What is the NetScaler hardware? Is it a VPX in a public cloud? If so, then make sure you go to the cloud's console, edit the VM, edit the NIC, and add the new IP address.
-
Go to System > Settings > Configure Modes. Enable Mac Based Forwarding. If that works, then you have a routing problem somewhere, probalby missing VLAN configuration.
-
I think large enterprises can still order new pooled capacity. And you can renew existing pooled capacity.
-
Citrix Gateway ICA Proxy allows a single protocol/port number: SSL 443 on front-end, ICA 2598 on back-end. The only internal machines that ICA Proxy connects to are Citrix VDAs. This is much more restrictive than a full VPN that allows a VPN client machine to connect to almost any internal machine on any protocol/port number.
-
Thanks. If there are separate pages for each major NetScaler version, then the 14.1 page should only have 14.1 versions.
-
Will 13.1 VPX support the latest ESX 7? Or will all ESX VPX customers be forced to upgrade to 14.1?
-
Does this mean that only 14.1 is supported on latest ESX 7? https://docs.netscaler.com/en-us/citrix-adc/current-release/deploying-vpx/supported-hypervisors-features-limitations.html
-
Why is 14.1 called Citrix ADC instead of NetScaler?
Carl Stalhood replied to Carl Stalhood's topic in Core ADC use cases
The admin login page for 14.1 also says Citrix ADC instead of NetScaler.
