Citrix Systems 4.2 manual Creating and Updating a VPN Customer Gateway Note

Page 203

Setting Up a Site-to-Site VPN Connection

Note

In addition to the specific Cisco and Juniper devices listed above, the expectation is that any Cisco or Juniper device running on the supported operating systems are able to establish VPN connections.

To set up a Site-to-Site VPN connection, perform the following:

1.Create a Virtual Private Cloud (VPC).

See Section 16.27, “Configuring a Virtual Private Cloud”.

2.Create a VPN Customer Gateway.

3.Create a VPN gateway for the VPC that you created.

4.Create VPN connection from the VPC VPN gateway to the customer VPN gateway.

16.24.4.1.Creating and Updating a VPN Customer Gateway Note

A VPN customer gateway can be connected to only one VPN gateway at a time.

To add a VPN Customer Gateway:

1.Log in to the CloudPlatform UI as an administrator or end user.

2.In the left navigation, choose Network.

3.In the Select view, select VPN Customer Gateway.

4.Click Add site-to-site VPN.

193

Page 202 Page 204
Image 203
Page 202 Page 204
Contents Page Page Cloud Infrastructure Concepts User Services OverviewGetting More Information and Help ConceptsSteps to Provisioning Your Cloud Infrastructure Service OfferingsSetting Up Networking for Users Working With Hosts 103 Working With Virtual MachinesWorking With Storage 129 Working with Templates 113Managing Networks and Traffic 147 Working with Usage 141Page System Reliability and High Availability 233 Tuning 249Troubleshooting 251 Working with System Virtual Machines 229Event Types 259 Alerts 261 Chapter Getting More Information and HelpAdditional Documentation Available Citrix Knowledge Center Contacting SupportPage Multiple Hypervisor Support What Is CloudPlatform?Concepts What Can CloudPlatform Do?Deployment Architecture Overview Cloud Infrastructure Overview Management Server OverviewMore Information Networking OverviewPage Page About Zones Cloud Infrastructure ConceptsAbout Regions Cloud Infrastructure Concepts About Pods About Clusters About Primary Storage About HostsAbout Physical Networks About Secondary StorageBasic Zone Network Traffic Types Advanced Zone Guest IP Addresses Basic Zone Guest IP AddressesAdvanced Zone Network Traffic Types A zone that uses advanced networking Advanced Zone Public IP AddressesSystem Reserved IP Addresses All zonesPage Accounts, Users, and Domains AccountsBehavior of Dedicated Hosts, Clusters, Pods, and Zones How to Use Dedicated HostsDedicating Resources to Accounts and Domains Adding an Ldap Server Using an Ldap Server for User AuthenticationConfiguring an Ldap Server Trust Store Trust Store Password Search Base Example Ldap Configuration CommandsRemoving an Ldap Configuration ApacheDS Query FilterActive Directory Search User Bind DN SSL Keystore Path and PasswordPage User Services Overview Page End Users UI Overview User InterfaceSupported Browsers Log In to the UILogging In as the Root Administrator Root Administrators UI OverviewCreating an Instance from a Template that Supports SSH Keys Using SSH Keys for AuthenticationChanging the Root Password Creating the SSH Keypair Output is something similar to what is given belowCreating an Instance Logging In Using the SSH KeypairResetting SSH Keys Page Overview of Projects Using Projects to Organize Users and ResourcesConfiguring Projects Setting Up InvitationsSetting Project Creator Permissions Setting Resource Limits for ProjectsSending Project Membership Invitations Creating a New ProjectAdding Members to a Project Adding Project Members From the UI Accepting a Membership InvitationSuspending or Deleting a Project Using the Project ViewPage Overview of Provisioning Steps Steps to Provisioning Your Cloud InfrastructureAdding a Region First Region The Default RegionAdding Regions optional Adding Third and Subsequent Regions Deleting a Region Prepare the System VM Template Adding a ZoneCreate a Secondary Storage Mount Point for the New Zone Steps to Add a New Zone Network Offering Description Basic Zone ConfigurationSteps to Provisioning Your Cloud Infrastructure Page Advanced Zone Configuration Page Steps to Provisioning Your Cloud Infrastructure Page NFS Vmfs Adding a PodAdd Cluster OVM Adding a ClusterAdd Cluster KVM or XenServer Adding a vSphere Cluster Add Cluster vSphereVMware Cluster Size Limit Steps to Provisioning Your Cloud Infrastructure Page Requirements for XenServer, KVM, and OVM Hosts Warning Adding a HostAdding a Host XenServer, KVM, or OVM KVM Host Additional Requirements Adding a XenServer, KVM, or OVM HostAdding a Host vSphere Adding Primary StorageAdding Secondary Storage Adding an NFS Secondary Staging Store for Each Zone Initialize and Test Steps to Provisioning Your Cloud Infrastructure Creating a New Compute Offering Service OfferingsCompute and Disk Service Offerings Creating a New Disk Offering Creating a New System Service Offering System Service OfferingsModifying or Deleting a Service Offering For more information, see .7, Stopping and Starting VMs Page Page Isolated Networks Setting Up Networking for UsersOverview of Setting Up Networking for Users About Virtual NetworksIndividual Network Service ProvidersNetwork Service Providers Support Matrix Runtime Allocation of Virtual Network ResourcesACL Support Matrix for an Isolated Network CombinationSupport Matrix for Shared Network Combination Support Matrix for Basic Zone Network OfferingsCreating a New Network Offering Supported Services Description Isolated Shared See Section Remote Access VPN Changing the Network Offering on a Guest Network Creating and Changing a Virtual Router Network Offering Page Page Best Practices for Virtual Machines Working With Virtual MachinesAbout Working with Virtual Machines Monitor VMs for Max Capacity Install Required Tools and DriversVM Lifecycle Creating a VM from a template Creating VMsCreating a VM from an ISO Configuring Usage of Linked Clones on VMwareAppending a Display Name to the Guest VM’s Internal Name Accessing VMsAssigning VMs to Hosts Stopping and Starting VMsChange Affinity Group for an Existing VM Affinity GroupsCreating a New Affinity Group Assign a New VM to an Affinity GroupDelete an Affinity Group Virtual Machine Snapshots for VMwareView Members of an Affinity Group Limitations on VM Snapshots Configuring VM SnapshotsUsing VM Snapshots Changing the VM Name, OS, or Group CPU and Memory Scaling for Running VMs Changing the Service Offering for a VMLimitations Configuring Dynamic CPU and RAM ScalingHow to Dynamically Scale CPU and RAM Updating Existing VMsMoving VMs Between Hosts Manual Live Migration Resetting the Virtual Machine Root Volume on RebootWorking with ISOs Recovering a Destroyed VMDeleting VMs Adding an ISO Changing a VMs Base Image Attaching an ISO to a VMPage 102 Working With Hosts Scheduled Maintenance and Maintenance Mode for HostsVCenter and Maintenance Mode XenServer and Maintenance ModeWorking With Hosts To take a server out of Maintenance ModeDisabling and Enabling Zones, Pods, and Clusters Removing HostsRemoving XenServer and KVM Hosts Re-Installing HostsUsing Cisco UCS as Bare Metal Host CloudPlatform Maintaining Hypervisors on HostsAssociating a Profile with a UCS Blade Registering a UCS ManagerDisassociating a Profile from a UCS Blade Changing Host PasswordOver-Provisioning and Service Offering Limits Balloon Driver Setting Over-Provisioning RatiosLimitations on Over-Provisioning in XenServer and KVM Requirements for Over-ProvisioningVlan Provisioning Service Offering Limits and Over-ProvisioningAdding Non Contiguous Vlan Ranges Vlan Allocation ExampleAssigning VLANs to Isolated Networks Requirements for Templates Default TemplateWorking with Templates Creating Templates OverviewWorking with Templates Private and Public TemplatesCreating a Template from an Existing Virtual Machine Uploading Templates Creating a Template from a SnapshotWorking with Templates System Preparation for Windows Server 2008 R2 Exporting TemplatesCreating a Windows Template Working with Templates Page Working with Templates System Preparation for Windows Server 2003 R2 Importing Amazon Machine Images Create a grub entry in /boot/grub/grub.conf Exit out of chroot Converting a Hyper-V VM to a Template Adding Password Management to Your Templates Deleting Templates Linux OS InstallationWindows OS Installation 128 Primary Storage Working With StorageStorage Overview NFS support Local storage support Storage over-provisioning Storage TagsWorking With Storage Fiber Channel supportChanging the Secondary Storage IP Address Maintenance Mode for Primary StorageSecondary Storage Best Practices for Secondary StorageChanging Secondary Storage Servers Working With VolumesCreating a New Volume Using Local Storage for Data VolumesTo Create a New Volume Uploading an Existing Volume to a Virtual MachineHypervisor Disk Image Format Attaching a VolumeVM Storage Migration Detaching and Moving VolumesMigrating a VM Root Volume to a New Storage Pool Migrating a Data Volume to a New Storage PoolResizing Volumes Working with Snapshots Reset VM to New Root Disk on RebootVolume Deletion and Garbage Collection To enable root disk reset on VM rebootAutomatic Snapshot Creation and Retention Incremental Snapshots and BackupVolume Status Snapshot Job Throttling Snapshot RestoreVMware Volume Snapshot Performance Working with Usage Configuring the Usage ServerAlerttypeusagesanityresult = Working with UsageSetting Usage Limits Parameter Name Definition Globally Configured LimitsDefault Account Resource Limits Per-Domain Limits Networking in a Pod Managing Networks and TrafficGuest Traffic Managing Networks and Traffic Networking in a ZoneConfiguring Isolated Guest Network Basic Zone Physical Network ConfigurationAdvanced Zone Physical Network Configuration Configure Public Traffic in an Advanced Zone Configuring a Shared Guest Network Limitation Using Security Groups to Control Traffic to VMsAbout Security Groups Security Groups in Advanced Zones KVM OnlyAdding Ingress and Egress Rules to a Security Group Enabling Security GroupsAdding a Security Group External Firewalls and Load Balancers MPX About Using a NetScaler Load BalancerVPX Configuring SNMPCommunity String on a Rhel ServerInitial Setup of External Firewalls and Load Balancers Adding a Load Balancer Rule Load Balancer RulesConfiguring AutoScale Prerequisites Configuration Managing Networks and Traffic Updating an AutoScale Configuration Disabling and Enabling an AutoScale ConfigurationRuntime Considerations Sticky Session Policies for Load Balancer RulesHealth Checks for Load Balancer Rules Components of Gslb Global Server Load BalancingAbout Global Server Load Balancing How Gslb Works in CloudPlatform Configuring Gslb For more information, see Configuring a Gslb Virtual Server4 Enabling Gslb in NetScaler Prerequisites and GuidelinesAdding a Gslb Rule Assigning Load Balancing Rules to Gslb Adding an Additional Guest Network Using Multiple Guest NetworksReconfiguring Networks in VMs Removing a Network Selecting the Default NetworkPrerequisites Adding a NetworkReleasing an IP Address Guest IP RangesAcquiring a New IP Address Dedicating IP Address Ranges to an Account Reserving Public IP Addresses and VLANs for AccountsStart IP End IP Dedicating Vlan Ranges to an AccountGateway Netmask IP Reservation Considerations IP Reservation in Isolated Guest NetworksReserving an IP Range Configuring Multiple IP Addresses on a Single NICBest Practices Assigning Additional IPs to a VM Port Forwarding and StaticNAT Services ChangesUse Cases GuidelinesAdding Multiple Subnets to a Shared Network Multiple Subnets in Shared NetworkPrerequisites and Guidelines About Elastic IP Managing Networks and Traffic About Portable IP Portable IPsGuidelines Configuring Portable IPsAcquiring a Portable IP Enabling or Disabling Static NAT Static NATTransferring Portable IP Egress Firewall Rules in an Advanced Zone Configuring an Egress Firewall RuleIP Forwarding and Firewalling Deny Configuring the Default Egress PolicyAllow Firewall Rules Port Forwarding IP Load BalancingDNS and Dhcp Remote Access VPNConfiguring Remote Access VPN Using Remote Access VPN with Windows Setting Up a Site-to-Site VPN Connection Using Remote Access VPN with Mac OSCreating and Updating a VPN Customer Gateway Note See .27, Configuring a Virtual Private CloudManaging Networks and Traffic Page Updating and Removing a VPN Customer Gateway Creating a VPN gateway for the VPCCidr Creating a VPN Connection NoteManaging Networks and Traffic Restarting and Removing a VPN Connection About Private Vlan Isolation in Advanced Zone Using Private VlanPrerequisites Creating a PVLAN-Enabled Guest NetworkAbout Inter-VLAN Routing Page Major Components of a VPC Configuring a Virtual Private CloudAbout Virtual Private Clouds VPC Network Considerations Network Architecture in a VPCConnectivity Options for a VPC Adding a Virtual Private Cloud Adding Tiers Managing Networks and Traffic Creating ACL Lists Configuring Network Access Control ListAbout Network ACL Lists Creating an ACL Rule Assigning a Custom ACL List to a Tier Creating a Tier with Custom ACL ListAdding a Private Gateway to a VPC See .27.5.2, ACL on Private Gateway Source NAT on Private GatewayCreating a Static Route ACL on Private GatewayBlacklisting Routes Deploying VMs to the TierDeploying VMs to VPC Tier and Shared Networks Acquiring a New IP Address for a VPC Releasing an IP Address Alloted to a VPC Enabling or Disabling Static NAT on a VPC Load Balancing Public Traffic Public LB Adding Load Balancing Rules on a VPCCreating a Network Offering for Public LB Creating a Public LB Rule How Does Internal LB Work in VPC? Load Balancing Tier-to-Tier traffic Internal LBEnabling Internal LB on a VPC Tier Creating an Internal LB Rule Adding a Port Forwarding Rule on a VPC TCP UDP Removing TiersPersistent Network Considerations Persistent NetworksEditing, Restarting, and Removing a Virtual Private Cloud Creating a Persistent Guest Network Console Proxy Working with System Virtual MachinesSystem VM Template Multiple System VM Support for VMwareWorking with System Virtual Machines Changing the Console Proxy SSL Certificate and DomainVirtual Router Configuring the Virtual RouterBest Practices for Virtual Routers Upgrading a Virtual Router with System Service OfferingsSecondary Storage VM Dedicated HA Hosts HA-Enabled Virtual MachinesSystem Reliability and High Availability HA for Management ServerLimiting the Rate of API Requests Configuring the API Request RatePrimary Storage Outage and Data Loss Secondary Storage Outage and Data LossLimitations on API Throttling 236 Managing the Cloud Using Tags to Organize Resources in the CloudManaging the Cloud Setting Configuration ParametersAbout Configuration Parameters Setting Local Configuration Parameters Setting Global Configuration ParametersGranular Global Configuration Parameters Cluster.cpu.allocated.capacity.disablThethr Administrator Alerts Changing the Database ConfigurationSnmp Alert Details Customizing Alerts with Global Configuration SettingsSending Alerts to External Snmp and Syslog Managers Syslog Alert Details Configuring Snmp and Syslog ManagersDeleting an Snmp or Syslog Manager Customizing the Network Domain NameStopping and Restarting the Management Server User Data and Meta Data Provisioning and Authentication APICloudPlatform API AllocatorsCloudPlatform API Set Database Buffer Pool Size TuningPerformance Monitoring Increase Management Server Maximum MemorySet and Monitor Total VM Limits per Host Configure XenServer dom0 MemoryTuning Event Notification TroubleshootingEvents Event LogsLong Running Job Events TroubleshootingStandard Events Deleting and Archiving Events and Alerts Event Log QueriesPermissions ProcedureWorking with Server Logs Data Loss on Exported Primary Storage Using cloud-bugtoolSymptom Log Collection Utility cloud-bugtoolCause Recovering a Lost Virtual RouterMaintenance mode not working on vCenter SolutionUnable to deploy VMs from uploaded vSphere template Unable to power on virtual machine on VMwareLoad balancer rules fail after changing network offering Appendix A. Event Types 260 Appendix B. Alerts Appendix B. Alerts
Related manuals
Manual 6 pages 23.94 Kb Manual 194 pages 3.03 Kb

4.2 specifications

Citrix Systems, a leading provider of virtualization solutions and cloud computing technologies, released version 4.2 of its popular software, Citrix XenApp, which was previously known as Presentation Server. This version marked a significant evolution in providing users with remote access to applications and desktops, emphasizing simplicity, performance, and security.

One of the standout features of Citrix XenApp 4.2 is its improved application streaming capabilities. This technology allows applications to be delivered to users in real-time, reducing the need for extensive local installations and enhancing the user experience. With application streaming, administrators can efficiently manage applications on a central server while ensuring that users have immediate access to the necessary tools.

Another highlight of this version is the enhanced security measures put in place to protect sensitive data. Citrix XenApp 4.2 includes support for SSL encryption, providing a secure communication channel for data transmitted between the server and clients. This is particularly crucial for businesses that need to comply with strict data protection regulations. Additionally, the integration of endpoint security features ensures that unauthorized access to applications is minimized.

Performance enhancements are also a critical focus in this release. Citrix optimized the delivery of applications over various network conditions, ensuring that users experience minimal latency regardless of their location. This was achieved through the incorporation of SmartAccess and SmartControl technologies, which allow administrators to set policies based on user roles, device types, and network conditions. This level of granularity enables organization-wide security without compromising on usability.

The user experience was further improved with a revamped interface, making it easier for end-users to access their applications and data. Simplified menus, clear navigation paths, and the ability to customize user settings contributed to a more efficient workflow, allowing users to focus on their tasks rather than struggling with the software.

Finally, Citrix XenApp 4.2 was designed to be highly scalable. Organizations of all sizes could deploy this solution to deliver applications efficiently, adapting to their specific needs as their user base grows or changes. This flexibility is crucial for businesses looking to future-proof their IT investments while maintaining optimal performance.

In summary, Citrix XenApp 4.2 stands out with its enhanced application streaming, robust security features, improved performance under varying conditions, user-friendly interface, and scalability, making it an ideal choice for organizations seeking to leverage virtualization for remote access to applications and desktops.
Top Page Image Contents