NetScaler Gateway is a gateway created by Citrix that allows you to use the load balancing system and provides a secure remote access to applications and desktops published through XenApp, XenDesktop and XenMobile.
In this tutorial, we will install NetScaler Gateway on our XenServer server to provide a secure remote access to our applications published with XenApp.
Nevertheless, the procedure is the same for desktops published with XenDesktop.
Configuration used :
* To simulate an external access, you need a PC that is outside of the local network where are your servers under Windows Server.
For this, you have 2 options :
Note : The certification authority is not required, but it allows you to test your configuration without paying SSL Certificate.
To begin, you should know that NetScaler Gateway is delivered as a virtual machine (a virtual appliance).
In our case, we will download NetScaler Gateway (recently renamed : NetScaler Unified Gateway) for the Citrix XenServer server.
Note : A free account is required to download NetScaler Gateway and an evaluation license for this program. (As explained a little later in this tutorial)
To import and install the NetScaler Gateway virtual machine, install XenCenter and connect to your XenServer server.
Note : as you can see from the picture below, this is a new installation of XenServer.
Go to the menu : File -> Import.
Select the file "NSVPX-XEN-11.0-64.34_nc.xva" downloaded from the Citrix website.
Select the XenServer server on which you want to import the virtual machine.
Select the repository where you want to import this VM.
At step "Networking", you will see the MAC address assigned to your virtual machine.
Note : you will need this MAC address for your trial license.
Once imported, the virtual machine will automatically start.
By going to the Console tab of the virtual machine, you will see the boot of NetScaler.
At first start of this virtual machine, you must configure the NetScaler network interface.
However, if you have already searched information concerning NetScaler on the Internet, you must have seen that this virtual machine has three IP addresses. Which is a bit confusing at the begining.
First, it is possible to assign several different IP addresses for a single network interface. It is also possible under Windows.
Then, here are IP addresses you can define for NetScaler :
In short, in our case, we use these IP addresses for NetScaler :
So, at the first start, we will indicate :
Then, leave the value 4 (default value) and press Enter to save the network configuration.
Then, wait until the big message "WARNING: Access to this system is for authorized users only" appears.
As you can see, it's possible to connect in command line on NetScaler.
Default credentials (username / password) are : nsroot / nsroot
To continue the configuration of NetScaler, access the web interface of NetScaler by typing the address : http://10.0.0.110/
Note : the IP address 10.0.0.110 is the NSIP (NetScaler IP Address)
As stated previously, default credentials (username / password) are: nsroot / nsroot
Participate in Citrix improvement program if you wish.
As you can see, the step 1 is already configured. Indeed, it is the network configuration that we indicated at the first start of NetScaler.
Now, NetScaler request a Subnet IP Address. Click the step "Subnet IP Address".
As explained in the diagram, the SNIP or Subnet IP Address allows NetScaler to communicate with servers that are in the background (XenApp, StoreFront, ...).
In our case, we will indicate this :
Then, click "Done".
At Step 3, we will specify the host name of NetScaler, the IP address of the DNS server to use, and the time zone to use.
Specify the following :
After this configuration, NetScaler will need to reboot. Click "Yes".
Wait during the reboot of NetScaler.
To complete the initial setup of NetScaler, you will need to import a license file to use NetScaler.
If you were logged in when downloading NetScaler, a trial license is awaiting assignment in your Citrix account.
Click on the step "Licenses".
As you can see on the right, NetScaler displays a Host ID. After verification, it's the MAC address of the virtual machine without the ":" character.
Recently, the download of NetScaler Unified Gateway generates a "Citrix Store NetScaler Gateway Enterprise VPX - Evaluation (90 day)" evaluation license that will not work with NetScaler.
To get a free evaluation license for NetScaler, you will need to go on the "NetScaler ADC" page, then click the buttons "Try for free" and "Send my license now". (You must be logged on Citrix.com to do this)
This will generate a "Citrix Store NetScaler VPX 1000 - Platinum Edition - Evaluation (90 Day)" license into your Citrix account.
To find it, go to your account and find the "Activate and assign licenses" or "Managing licenses" page.
Then, go to the "Activate and assign licenses" tab.
In the list you will find 2 trial licenses :
To use this Platinum license, you must first specify the MAC address (without the ":") of your virtual machine "NetScaler Virtual Appliance" in the Host ID box.
Then, click "Continue".
Note : to find the MAC address of your virtual machine, select your "NetScaler Virtual Appliance" VM and go to the "Networking" tab.
Select the license and click "Download".
Note : on the image below, you can see that we are in the "Reassign" tab. Indeed, we had already assigned this license during our local tests.
The downloaded file will have a ".lic" extension.
In the web interface of NetScaler, click the "Browse" button and select your license file.
If your license is valid for this installation of NetScaler, the message "1 License (s) Updated Successfully" will appear.
Click on "Reboot".
Click "Yes" to save the configuration before reboot.
Then, a window "Licenses" is displayed with all the options available with the "Platinum" license.
To finish the basic configuration of NetScaler, right-click on the "NetScaler Gateway" menu and click "Enable Feature".
If you want to change the password of the "nsroot" account, go to the menu "System -> User Administration -> Users".
Then, select this user and click the button "Change Password".
Enter a new password and click OK.
® InformatiWeb-Pro.net - InformatiWeb.net 2008-2020 - © Lionel Eppe - All rights reserved.
Total or partial reproduction of this site is prohibited and constitutes an infringement punishable by articles L.335-2 and following of the intellectual property Code.