Sarovani CK

Hello Team , How can I confirm if the traffic from specific source is reaching VIP in Netscaller device ? Is there a command in Netscaller LB similar to "show sys connection cs-client-addr" used in F5 loadbalancer ?

Can I run this in the production hours ?

Hi Team , I am new to Citrix , Can someone please help me to generate the support bundle file ?

Hello Team , what is the command to disable the below vserver and servicegroup ? add lb vserver VIP_HTTP_CISCO.COM HTTP 10.10.10.1 80 -persistenceType SOURCEIP -lbMethod ROUNDROBIN -cltTimeout 180 add serviceGroup SVG_HTTP_CISCO.COM.COM HTTP -maxClient 0 -maxReq 0 -cip DISABLED -usip YES -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO

Hi Team , I need help on cli command to remove the vserver , servicegroup and node configuration. Can I remove this config just by "rm lb vserver VIP_HTTP_CISCO.COM "..Will it delete the entire configuration related to vserver , servicegroup and nodes ? add lb vserver VIP_HTTP_CISCO.COM HTTP 10.10.10.1 80 -persistenceType SOURCEIP -lbMethod ROUNDROBIN -cltTimeout 180 add serviceGroup SVG_HTTP_CISCO.COM.COM HTTP -maxClient 0 -maxReq 0 -cip DISABLED -usip YES -useproxyport YES -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO bind lb vserver VIP_HTTP_CISCO.COM SVG_HTTP_CISCO.COM.COM bind serviceGroup SVG_HTTP_CISCO.COM.COM REAL_SRV2_CISCO.COM 80 bind serviceGroup SVG_HTTP_CISCO.COM.COM REAL_SRV1_CISCO.COM 80

Hi Team , I have the below config as example , backend server is on 10.0.46.23:8457 and default tcp monitor is being used , So which IP will be used as source when Netscaller performs the health check . Is there a way to check on the device ? any command ? NETSCALLER_LB[Primary]-PARTITION-TEST> show servicegroup CSK_ACI_CISCO.COM_TEST CSK_ACI_CISCO.COM_TEST - SSL State: ENABLED Effective State: UP Monitor Threshold : 0 Max Conn: 0 Max Req: 0 Max Bandwidth: 0 kbits Use Source IP: NO Client Keepalive(CKA): NO Monitoring Owner: 0 TCP Buffering(TCPB): NO HTTP Compression(CMP): NO Idle timeout: Client: 9000 sec Server: 9000 sec Client IP: DISABLED Cacheable: NO SC: OFF SP: OFF Down state flush: ENABLED Monitor Connection Close : NONE Appflow logging: ENABLED HTTP profile name: Cisco_http_profile ContentInspection profile name: ??? Process Local: DISABLED Traffic Domain: 0 1) 10.0.46.23:8457 State: UP Server Name: SRV_10.0.46.23 Server ID: None Weight: 1 Last state change was at Mon Oct 23 23:24:31 2023 Time since last state change: 0 days, 16:11:17.270 Monitor Name: tcp-default State: UP Passive: 0 Probes: 3680002 Failed [Total: 28072 Current: 0] Last response: Success - TCP syn+ack received. Response Time: 2000 millisec

Hi Team , How can I check if there are any current traffic hitting the VIP ? Or how do I check the statistics of servicegroup member ..Say If I have 4 members in the servicegroup , How do I know if the traffic is hitting which member ?

Thank you @Deepak Kumar Jha​

Hi @Deepak Kumar Jha​ OK , So say if the same server with different port SERVERTEST008 is being used in multiple servicegroup or VIP's , Will it not cause a problem if I directly remove the server instead of unbinding it from the specific service group ?

Hi @Arvind Kandula​ , Thanks for the response , You have said in general how to remove the node ..However , Can you check the configuration I shared and guide me how can I remove the nodes as per my configuration ? I also want to confirm these nodes are not being reused in other VIP's ... And also , Is it not required to unbind the nodes from the service group before removing the nodes from the Netscaller configuration ? Kindly confirm if the below commands to unbind and remove the node configuration is correct ? ! unbind serviceGroup CSK_RRR_TEST_443 SERVERTEST010 8443 unbind serviceGroup CSK_RRR_TEST_443 SERVERTEST009 8443 unbind serviceGroup CSK_RRR_TEST_443 SERVERTEST008 8443 rm server SERVERTEST008 rm server SERVERTEST009 rm server SERVERTEST010 save config ! ***THANKS IN ADVANCE***

Hi Team , I need help on cli command to remove the servers 192.168.12.28 , 192.168.12.29 and 192.168.12.32 from the VIP .Below is the related configuration of the VIP,service group and nodes ... add server SERVERTEST008 192.168.12.28 -td 804 add server SERVERTEST009 192.168.12.29 -td 804 add server SERVERTEST010 192.168.12.32 -td 804 add server SERVERTEST007 192.168.12.33 -td 804 bind serviceGroup CSK_RRR_TEST_443 SERVERTEST010 8443 bind serviceGroup CSK_RRR_TEST_443 SERVERTEST009 8443 bind serviceGroup CSK_RRR_TEST_443 SERVERTEST008 8443 bind serviceGroup CSK_RRR_TEST_443 SERVERTEST007 8443 bind lb vserver VIP_CSK_RRR_TEST_443 CSK_RRR_TEST_443 add serviceGroup CSK_RRR_TEST_443 TCP -td 804 -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -cltTimeout 9000 -svrTimeout 9000 -CKA NO -TCPB NO -CMP NO -netProfile SNIP_DMZ_1

What is the use of weight command in servicegroup configuration ? And how it actually works .Can you please explain with this below config example ? bind serviceGroup TEST_HTTP_CSK REAL_SRV8_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV7_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV6_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV5_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV4_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV3_CSK 80 -weight 100 bind serviceGroup TEST_HTTP_CSK REAL_SRV2_CSK 80 -weight 65 bind serviceGroup TEST_HTTP_CSK REAL_SRV1_CSK 80 -weight 65 bind serviceGroup TEST_HTTP_CSK -monitorName tcp

Hi @Paul Blitz​ We have corrected the date and time by restarting the ntpd process , but the offset time and jitter are keep increasing . Is there any solution for that? remote refid st t when poll reach delay offset jitter ============================================================================== 196.8.24.1 192.8.1.1 3 u 38 64 377 1.501 218662. 11871.3 196.9.24.1 192.8.1.1 3 u 43 64 377 4.184 218462. 11800.2

thanks @Sandhya Gopinath​ We have corrected the date and time but on the one cluster member the offset time and jitter are keep increasing . Is there any solution for that ?

Hi Experts , Due to a large offset time difference on the Netscaller load-balancer, the date & time on one of the cluster member is not in Sync with the date & time of NTP server. We have 2 devices in cluster . Member A which is Master having incorrect Date & Time . Member B has correct date & time . Will there be any impact if the date & time is not corrected immediately on one of the cluster member ?

Before doing the NTP change the date was showing wrongly .. It was showing as July 1 ( instead of July 6 ) , After changing the NTP server , the time still shows as July 1st . But on cluster member time is showing correctly .. How do I correct it ?

Thanks @Arvind Kandula​ , In the above links I did not find the right information to collect the system logs , it only shows how to generate tech support file .. Example in F5 we check the logs in below path : Is there a similar command to find the logs . cd /var/log cat ltm cat audit

Hi @Hitesh Mistry​ , Thanks for the response . I am new to Netscaler , Can you please guide me or share the link on how to open a support bundle and check . Thanks ,

Hello Team , I am new to netscaler , I need to know how to check the logs in cli for any system related or admin logs . Example : 1.logs which shows If anyone recently done any changes on the device . 2.logs related HA failover 3.Logs related to VIP status etc

Hi Team , We are frequently getting the alert : The bandwidth usage for the partition has exceeded the high threshold limit. When we check on the device the used bandwidth is normal . Can you please help to troubleshoot this further . FR-VPX-PROD-A1(Primary)> show partition 1) Name: PART_TWO Partition ID: 2 Max BW : 550000 Kbps Max Conn :300000 Max Mem: 500 MB 2) Name: PART_THREE Partition ID: 3 Max BW : 400000 Kbps Max Conn :300000 Max Mem: 500 MB 3) Name: PART_FOUR Partition ID: 4 Max BW : 50000 Kbps Max Conn :300000 Max Mem: 500 MB Done Partition(s) Summary CurBW MaxBW CurConn MaxConn MemUsgPc MaxMem PART..._ 21904 550000 2966 300000 5 500 PART..._ 34072 400000 9251 300000 7 500 PART..._ 0 50000 0 300000 0 500

OK So can we do it on GUI ? If So , Can we first add the new ntp server first and then delete the old one .and save the config ? Will this work !

Current configuration : > show ntp server NTP Server: 10.10.10.1 Minimum Poll Interval: 6 (64secs) Maximum Poll Interval: 10 (1024secs) Preferred: NO Key: 1003 NTP Server: 10.10.10.2 Minimum Poll Interval: 6 (64secs) Maximum Poll Interval: 10 (1024secs) Preferred: YES Key: 1003 Done Modification : modify ntp server 192.168.6.1 modify ntp server 192.168.8.1 set ntp server 192.168.6.1 -preferredNtpServer YES save config . Can you please confirm if I can use the above commands for ntp modification ?And will there be any impact of doing the ntp modification ?

any simple show commands to check the same ?

Ok So in our device we have classic config and we would like to change the config with -rule true -action .. So can we just modify it with below command ? modify authentication Policy ACIBANG_pol -rule true -action ACIBANG or delete authentication tacacsPolicy ACIBANG_pol ns_true ACIBANG add authentication Policy ACIBANG_pol -rule true -action ACIBANG

How to check the existing ntp configuration from cli ? Will there be any production impact if we change the ntp config ?