How Web Interface Works | Citrix Systems CITRIX NETSCALER 9.3

Chapter 6 Web Interface

How Web Interface Works

The following figure illustrates a basic Web interface session.

Figure 6-1.A Basic Web Interface Session

Following is a typical set of interactions among a user device, a NetScaler running the Web interface, and a server farm.

1.A user authenticates to the Web interface through a Web browser or by using the XenApp plug-in.

2.The Web interface reads the user's credentials and forwards the information to the Citrix XML Service running on servers in the server farm.

3.The Citrix XML Service on the designated server retrieves from the servers a list of resources that the user can access. These resources constitute the user's resource set and are retrieved from the Independent Management Architecture (IMA) system.

4.The Citrix XML Service then returns the user's resource set to the Web interface running on the NetScaler.

5.The user clicks an icon that represents a resource on the HTML page.

6.The Web interface queries the Citrix XML Service for the least busy server.

7.The Citrix XML Service returns the address of this server to the Web interface.

8.The Web interface sends the connection information to the Web browser.

9.The Web browser initiates a session with the server.

Prerequisites

The following prerequisites are required before you begin installing and configuring the Web interface.

wXenApp or XenDesktop farms are set up and running in your environment. For more information about XenApp, see the XenApp documentation at http://

150

Image 150

Citrix Systems CITRIX NETSCALER 9.3 manual How Web Interface Works, Prerequisites

Contents

Citrix NetScaler Administration Guide Copyright and Trademark Notice Page Page Contents Snmp Vii Audit Logging Web Server Logging 105 Advanced Configurations Contents Web Interface AppFlow Reporting Tool Contents Xvi Formatting Conventions for NetScaler Documentation This PrefaceFormatting Conventions Meaning Boldface Documentation Available on the NetScaler Appliance ConventionTo view the documentation Getting Service and Support NetScaler Documentation FeedbackTo provide feedback at the Knowledge Center home Preface Authentication and Authorization Topics Configuring Users and Groups Configuring User AccountsShow system user Example Timeout CLI Idle Session Timeout Secs Parameters for configuring a user accountPassword Password UserName User Name Configuring User Groups To create a user group by using the NetScaler command lineShow system group Example Show system group groupName Example GroupName Group Name Parameters for configuring a user groupShow system group groupName UserName Configuring Command Policies Built-in Command PoliciesCLI Prompt CLI Idle Session Timeout Secs Except show runningconfig, show Creating Custom Command PoliciesBuilt-in Command Policies Policy name Allows Runningconfig, and sh gslb Matches these commands Command specification regular expression Policyname Parameters for configuring a command policySh system cmdPolicy Example Action Binding Command Policies to Users and Groups Sh system user userName Parameters for binding a command policy to a userSh system user userName Example Priority Sh system group groupName Parameters for binding a command policy to a groupSh system group groupName Example GroupName Resetting the Default Administrator nsroot Password To reset the nsroot password Example of a User Scenario Fsck /dev/ad0s1a Mount /dev/ad0s1a /flash Configuration steps Sample Values for Creating Entities Field Configuring External User Authentication Configuring Ldap Authentication Examples of Base Distinguished Name Ldap server Base DN Examples of Bind Distinguished Name Ldap serverBind DN Authentication Type, select LDAP. Next to Server, click New Determining attributes in the Ldap directory Configuring Radius Authentication Choosing Radius authentication protocolsAuthentication Type, select Radius Configuring IP address extraction Configuring TACACS+ Authentication Configuring NT4 AuthenticationAuthentication Type, select Tacacs Authentication Type, select NT4 Authentication and Authorization Snmp Importing MIB Files to the Snmp Manager and Trap Listener Enabling or Disabling an Snmp Alarm Enable snmp alarm alarm name Sh snmp alarm alarm name Parameters for configuring Snmp alarms Configuring AlarmsTo configure an Snmp alarm by using the command line Severity Configuring Traps To configure Snmp alarms by using the configuration utilityTo add an Snmp trap by using the NetScaler command line Parameters for configuring Snmp traps To configure Snmp Traps by using the configuration utility Enabling Unconditional Snmp Trap Logging Parameters for unconditional Snmp trap logging Configuring the NetScaler for Snmp v1 and v2 QueriesSpecifying an Snmp Manager SnmpTrapLogging Snmp Trap Logging To add an Snmp manager by using the NetScaler command line Show snmp manager Parameters for configuring an Snmp manager IPAddress To add an Snmp manager by using the configuration utility Sh snmp community Parameters for configuring an Snmp community stringSpecifying an Snmp Community Permissions Configuring Snmp Alarms for Rate Limiting Configuring an Snmp Alarm for Throughput or PPSCommunity String*-communityName Show snmp alarm PF-RL-RATE-THRESHOLD NormalValue Show snmp alarm PF-RL-PPS-THRESHOLDThresholdValue State Configuring Snmp Alarm for Dropped Packets Alarm Threshold-thresholdValue Normal Threshold-normalValue Configuring the NetScaler for SNMPv3 Queries Parameters for configuring an Snmp alarm for dropped packets Setting the Engine ID Parameters for setting the engine ID Configuring a ViewTo set the engine ID by using the NetScaler command line To set the engine ID by using configuration utility Configuring a Group Parameters for configuring an Snmp viewTo add an Snmp group by using the NetScaler command line To configure a user by using the NetScaler command line Configuring a UserParameters for configuring an Snmp group SecurityLevel Parameters for configuring an Snmp user Citrix NetScaler Administration Guide Snmp Audit Logging Audit Logging Configuring the NetScaler Appliance for Audit Logging Configuring Audit ServersShow audit syslogAction name ServerIP Parameters for configuring auditing serversShow audit nslogAction name ServerPort Log levels defined Configuring Audit Policies To configure an auditing server actionTo configure a Syslog policy by using the command line To configure an Nslog policy by using the command line Parameters for configuring audit policiesRule Parameters for binding the audit policies globally To configure an audit server policyBinding the Audit Policies Globally Name* name Server* action To globally bind the audit policy Configuring Policy-Based LoggingConfiguring an Audit Message Action Pre Requisites BypassSafetyCheck StringBuilderExprLogtoNewnslog Installing and Configuring the Nslog Server Binding Audit Message Action to a Policy Installing Nslog Server on the Linux Operating System Supported Platforms for the Nslog Server Operating systemSoftware requirements Installing Nslog Server on the FreeBSD Operating System Pkginfo grep NSaudserver Pkgdelete NSaudserver To install Nslog server on a Windows operating system On the system, where you have downloaded the Nslog package Audserver -remove Nslog Server Command OptionsTo uninstall the Nslog server on a Windows operating system Audserver -stop To add the IP addresses of the NetScaler appliance Audserver -remove Specifies Verifying the Nslog Server Configuration File Running the Nslog ServerTo start audit server logging Customizing Logging on the Nslog Server Creating FiltersTo create a filter Specifying Log Properties Default Settings for the Log Properties Sample Configuration File audit.conf Following is a sample configuration file Web Server Logging Configuring the NetScaler Appliance for Web Server Logging Enabling or Disabling Web Server Logging Sh weblogparam Example Modifying the Default Buffer SizeParameter for modifying the buffer size Buffer Size To modify the buffer size by using the configuration utility Supported Platforms for the Nswl Client Operating system Installing Nswl Client on a Solaris Operating System Hardware requirementsCp pathtocd/Utilities/weblog/Solaris/NSweblog.tar /tmp Tar xvf NSweblog.tar Installing Nswl Client on a Linux Operating SystemCd /tmp Pkginfo grep NSweblog Installing Nswl Client on a FreeBSD Operating System To view the installed Web server logging filesTo get more information about the NSweblog RPM file Installing Nswl Client on a Mac OS Operating System Pkgdelete NSweblogCp pathtocd/Utilities/weblog/macos/NSweblog.tgz /tmp Installing Nswl Client on a Windows Operating System To install the Nswl client on a Windows system Cp pathtocd/Utilities/weblog/AIX/NSweblog.rpm /tmp Installing Nswl Client on an AIX Operating SystemTo uninstall the Nswl client on a Windows system Rpm -i NSweblog.rpm Nswl Client Command Options Nswl Command Options Nswl command Specifies Adding the IP Addresses of the NetScaler Appliance To add the Nsip address of the NetScaler applianceNswl -addns -f directorypath \log.conf Running the Nswl Client Verifying the Nswl Configuration FileTo verify the configuration in the Nswl configuration file Customizing Logging on the Nswl Client System Parameters for Creating a Filter Specifies On OFF To create a filter for a virtual server LogFormat Ncsa Understanding the Ncsa and W3C Log Formats Ncsa Common Log Format W3C Extended Log Format Ncsa Common Log Format Argument Specifies Entries DirectivesDirective Descriptions Prefix Descriptions Specifies FieldsIdentifiers Examples W3C Extended Log Format Identifiers No Prefix Required Description Creating a Custom Log Format by Using the Nswl Library Creating a Custom Log FormatField Description To create the custom log format by using the Nswl Library Creating a Custom Log Format Manually Sample Configuration File Creating Apache Log Formats Ncsa Arguments for Defining a Custom Log Format 11.Custom Log Format Argument Specifies Foobari Foobaro Formatt Time Format Definition 12.Time Format Definition Argument Specifies Argument Specifies 123 Web Server Logging 124 Advanced Configurations Configuring Clock Synchronization To add an NTP server by using the NetScaler command lineShow ntp server Example Minpoll Parameters for configuring an NTP serverServerName Maxpoll Configuring Clock Synchronization Manually Enable ntp sync Disable ntp syncStarting or Stopping the NTP Daemon Usr/sbin/ntpd -c /nsconfig/ntp.conf -l /var/log/ntpd.log Show ns config ExampleViewing the System Date and Time Configuring TCP Window Scaling Parameters for configuring window scaling Show ns tcpParam ExampleWSVal Configuring Selective Acknowledgment Enabled Clearing the Configuration To enable Sack by using the Configuration Utility Viewing the Http Band Statistics Parameters for clearing a configurationTo clear a configuration by using the configuration utility Level ReqBandSize RespBandSize To add an Http profile by using the NetScaler command line Configuring Http ProfilesTo modify the band range by using the configuration utility Built-in Http Profiles Built-in profile Description Parameters for adding an Http profile Configuring TCP Profiles To add an Http profile by using the configuration utilityBuilt-in TCP Profiles Built-in profile Description To add a TCP profile by using the NetScaler command line Parameters for creating a TCP profile To add a TCP profile by using the configuration utility Specifying a TCP Buffer Size Example Parameters for setting the TCP buffer size in a TCP profile BufferSize Specifying the MSS Value in a TCP Profile Parameters for specifying the MSS value in a TCP profileMss Learn MSS for VServer LearnVsvrMSS Advanced Configurations 148 Web Interface How Web Interface Works Prerequisites Installing the Web Interface Configuring the Web Interface Web Interface tar file pathJRE tar file path Parameters for configuring Web interface sites Access Gateway URL Gateway Direct ModeAuthentication Point Port XML Service Port Configuring a Web Interface Site for LAN Users Using HttpXML Service Addresses Transport A Web Interface Site Configured for LAN Users Using Http Site Type Published Resource Type Kiosk Mode Virtual Server Protocol select Https IP Address Port Add service WILoopbackService 127.0.0.1 Http Configuring a Web Interface Site for LAN Users Using Https A Web Interface Site Configured for LAN Users Using Https 160 161 Add lb vserver Httpswi SSL 10.102.29.3 Configuring a Web Interface Site for Remote Users Using Agee A Web Interface Site Configured for Remote Users Using Agee 165 166 AppFlow How AppFlow Works NetScaler Flow Sequence Flow Records Templates Configuring the AppFlow Feature Enabling or Disabling the AppFlow Feature To specify a collector by using the NetScaler command lineSpecifying a Collector To specify a collector by using the configuration utility Configuring an AppFlow ActionTo remove a collector by using the NetScaler command line Parameters for specifying a collector Parameters for configuring an AppFlow action CollectorsComment Configuring an AppFlow Policy Show appflow policy name Parameters for configuring an AppFlow policy Rule Action To add an expression by using the Add Expression dialog box Http Binding an AppFlow Policy Show appflow global Invoke Invoke flag LabelType Parameters for binding an AppFlow policyGotoPriorityExpression LabelName Enabling AppFlow for Virtual Servers Click Apply Changes Enabling AppFlow for a Service Setting the AppFlow Parameters AppFlow Parameters HttpMethod HttpCookieHttpReferer HttpHost Reporting Tool Using the Reporting Tool To invoke the Reporting toolWorking with Reports Using Built-in Reports Creating and Deleting Reports Modifying the Time Interval Time Intervals Time interval Displays Setting the Data Source and Time Zone Exporting and Importing Custom Reports Working with Charts Adding a ChartModifying a Chart Viewing a Chart To change the graph type of a chart To view numeric data for a graph To change the color and graph type of a data set Deleting a Chart To export chart data to ExcelExamples Stopping and Starting the Data Collection Utility Limits on Entity Numbers Retrieved by nscollect Entity name Entity name Limit To stop nscollectTo start nscollect on the local system Netscaler/nscollect stop To start nscollect on the remote system Netscaler/nscollect start