Manuals / Citrix Systems / Computer Equipment / Network Router

Citrix Systems CITRIX NETSCALER 9.3 Configuring a Web Interface Site for LAN Users Using Https

Models: CITRIX NETSCALER 9.3

1 195

Download 195 pages 43.21 Kb

Page 159

Citrix NetScaler Administration Guide

Configuring a Web Interface Site for LAN Users Using HTTPS

In this scenario, user accounts and the Web interface setup are on the same enterprise LAN. Users access the Web interface by using an SSL-based (HTTPS) vserver. The Web interface exposes its own login page for authentication. SSL offloading is done by this vserver on the NetScaler. The vserver IP address is used to access the Web interface instead of the NetScaler IP address (NSIP).

The following figure illustrates the Web interface running on the NetScaler appliance NS1. A Web interface site WINS1 is created and a XenApp farm XA1 and a XenDesktop farm XD1 are bound to it. An HTTPS vserver HTTPS_WI is also created. Client C1 uses the IP address of the HTTPS_WI vserver to access the WINS1 site.

Figure 6-3.A Web Interface Site Configured for LAN Users Using HTTPS

To configure a Web interface site for LAN users using HTTPS by using the configuration utility

1.In the navigation pane, click Web Interface.

2.In the details pane, click Web Interface Wizard.

3.On the wizard Introduction page, click Next.

4.On the wizard Configure Web Interface Site page, specify the values for the following parameters, which correspond to parameters described in Parameters for configuring Web interface sites on page 153 as shown:

159

Image 159

Citrix Systems CITRIX NETSCALER 9.3 manual Configuring a Web Interface Site for LAN Users Using Https

Contents

Citrix NetScaler Administration Guide Copyright and Trademark Notice Page Page Contents Snmp Vii Audit Logging Web Server Logging 105 Advanced Configurations Contents Web Interface AppFlow Reporting Tool Contents Xvi Formatting Conventions for NetScaler Documentation This PrefaceFormatting Conventions Meaning Boldface Documentation Available on the NetScaler Appliance ConventionTo view the documentation Getting Service and Support NetScaler Documentation FeedbackTo provide feedback at the Knowledge Center home Preface Topics Authentication and AuthorizationConfiguring Users and Groups Configuring User AccountsShow system user Example UserName User Name Parameters for configuring a user accountPassword Password Timeout CLI Idle Session Timeout SecsConfiguring User Groups To create a user group by using the NetScaler command lineShow system group Example Show system group groupName Example UserName Parameters for configuring a user groupShow system group groupName GroupName Group NameConfiguring Command Policies Built-in Command PoliciesCLI Prompt CLI Idle Session Timeout Secs Runningconfig, and sh gslb Creating Custom Command PoliciesBuilt-in Command Policies Policy name Allows Except show runningconfig, showCommand specification regular expression Matches these commandsAction Parameters for configuring a command policySh system cmdPolicy Example PolicynameBinding Command Policies to Users and Groups Priority Parameters for binding a command policy to a userSh system user userName Example Sh system user userNameGroupName Parameters for binding a command policy to a groupSh system group groupName Example Sh system group groupNameTo reset the nsroot password Resetting the Default Administrator nsroot PasswordFsck /dev/ad0s1a Mount /dev/ad0s1a /flash Example of a User ScenarioSample Values for Creating Entities Field Configuration stepsConfiguring External User Authentication Configuring Ldap Authentication Examples of Base Distinguished Name Ldap server Base DN Examples of Bind Distinguished Name Ldap serverBind DN Authentication Type, select LDAP. Next to Server, click New Determining attributes in the Ldap directory Configuring Radius Authentication Choosing Radius authentication protocolsAuthentication Type, select Radius Configuring IP address extraction Configuring TACACS+ Authentication Configuring NT4 AuthenticationAuthentication Type, select Tacacs Authentication Type, select NT4 Authentication and Authorization Snmp Importing MIB Files to the Snmp Manager and Trap Listener Enable snmp alarm alarm name Sh snmp alarm alarm name Enabling or Disabling an Snmp AlarmSeverity Configuring AlarmsTo configure an Snmp alarm by using the command line Parameters for configuring Snmp alarmsConfiguring Traps To configure Snmp alarms by using the configuration utilityTo add an Snmp trap by using the NetScaler command line To configure Snmp Traps by using the configuration utility Parameters for configuring Snmp trapsEnabling Unconditional Snmp Trap Logging SnmpTrapLogging Snmp Trap Logging Configuring the NetScaler for Snmp v1 and v2 QueriesSpecifying an Snmp Manager Parameters for unconditional Snmp trap loggingShow snmp manager To add an Snmp manager by using the NetScaler command lineIPAddress Parameters for configuring an Snmp managerTo add an Snmp manager by using the configuration utility Permissions Parameters for configuring an Snmp community stringSpecifying an Snmp Community Sh snmp communityConfiguring Snmp Alarms for Rate Limiting Configuring an Snmp Alarm for Throughput or PPSCommunity String*-communityName Show snmp alarm PF-RL-RATE-THRESHOLD State Show snmp alarm PF-RL-PPS-THRESHOLDThresholdValue NormalValueAlarm Threshold-thresholdValue Normal Threshold-normalValue Configuring Snmp Alarm for Dropped PacketsParameters for configuring an Snmp alarm for dropped packets Configuring the NetScaler for SNMPv3 QueriesSetting the Engine ID To set the engine ID by using configuration utility Configuring a ViewTo set the engine ID by using the NetScaler command line Parameters for setting the engine IDConfiguring a Group Parameters for configuring an Snmp viewTo add an Snmp group by using the NetScaler command line SecurityLevel Configuring a UserParameters for configuring an Snmp group To configure a user by using the NetScaler command lineParameters for configuring an Snmp user Citrix NetScaler Administration Guide Snmp Audit Logging Audit Logging Configuring the NetScaler Appliance for Audit Logging Configuring Audit ServersShow audit syslogAction name ServerPort Parameters for configuring auditing serversShow audit nslogAction name ServerIPLog levels defined Configuring Audit Policies To configure an auditing server actionTo configure a Syslog policy by using the command line To configure an Nslog policy by using the command line Parameters for configuring audit policiesRule Name* name Server* action To configure an audit server policyBinding the Audit Policies Globally Parameters for binding the audit policies globallyPre Requisites Configuring Policy-Based LoggingConfiguring an Audit Message Action To globally bind the audit policyBypassSafetyCheck StringBuilderExprLogtoNewnslog Binding Audit Message Action to a Policy Installing and Configuring the Nslog ServerInstalling Nslog Server on the Linux Operating System Supported Platforms for the Nslog Server Operating systemSoftware requirements Installing Nslog Server on the FreeBSD Operating System Pkgdelete NSaudserver Pkginfo grep NSaudserverOn the system, where you have downloaded the Nslog package To install Nslog server on a Windows operating systemAudserver -stop Nslog Server Command OptionsTo uninstall the Nslog server on a Windows operating system Audserver -removeAudserver -remove Specifies To add the IP addresses of the NetScaler applianceVerifying the Nslog Server Configuration File Running the Nslog ServerTo start audit server logging Customizing Logging on the Nslog Server Creating FiltersTo create a filter Specifying Log Properties Default Settings for the Log Properties Following is a sample configuration file Sample Configuration File audit.confWeb Server Logging Enabling or Disabling Web Server Logging Configuring the NetScaler Appliance for Web Server LoggingBuffer Size Modifying the Default Buffer SizeParameter for modifying the buffer size Sh weblogparam ExampleSupported Platforms for the Nswl Client Operating system To modify the buffer size by using the configuration utilityInstalling Nswl Client on a Solaris Operating System Hardware requirementsCp pathtocd/Utilities/weblog/Solaris/NSweblog.tar /tmp Pkginfo grep NSweblog Installing Nswl Client on a Linux Operating SystemCd /tmp Tar xvf NSweblog.tarInstalling Nswl Client on a FreeBSD Operating System To view the installed Web server logging filesTo get more information about the NSweblog RPM file Installing Nswl Client on a Mac OS Operating System Pkgdelete NSweblogCp pathtocd/Utilities/weblog/macos/NSweblog.tgz /tmp To install the Nswl client on a Windows system Installing Nswl Client on a Windows Operating SystemRpm -i NSweblog.rpm Installing Nswl Client on an AIX Operating SystemTo uninstall the Nswl client on a Windows system Cp pathtocd/Utilities/weblog/AIX/NSweblog.rpm /tmpNswl Command Options Nswl command Specifies Nswl Client Command OptionsAdding the IP Addresses of the NetScaler Appliance To add the Nsip address of the NetScaler applianceNswl -addns -f directorypath \log.conf Customizing Logging on the Nswl Client System Verifying the Nswl Configuration FileTo verify the configuration in the Nswl configuration file Running the Nswl ClientOn OFF Parameters for Creating a Filter SpecifiesTo create a filter for a virtual server LogFormat Ncsa Ncsa Common Log Format Understanding the Ncsa and W3C Log FormatsNcsa Common Log Format Argument Specifies W3C Extended Log FormatEntries DirectivesDirective Descriptions Examples FieldsIdentifiers Prefix Descriptions SpecifiesDescription W3C Extended Log Format Identifiers No Prefix RequiredCreating a Custom Log Format by Using the Nswl Library Creating a Custom Log FormatField Description Creating a Custom Log Format Manually To create the custom log format by using the Nswl LibraryCreating Apache Log Formats Sample Configuration FileNcsa 11.Custom Log Format Argument Specifies Arguments for Defining a Custom Log FormatFoobari Foobaro Formatt 12.Time Format Definition Argument Specifies Time Format DefinitionArgument Specifies 123 Web Server Logging 124 Advanced Configurations Configuring Clock Synchronization To add an NTP server by using the NetScaler command lineShow ntp server Example Maxpoll Parameters for configuring an NTP serverServerName MinpollConfiguring Clock Synchronization Manually Enable ntp sync Disable ntp syncStarting or Stopping the NTP Daemon Usr/sbin/ntpd -c /nsconfig/ntp.conf -l /var/log/ntpd.log Show ns config ExampleViewing the System Date and Time Configuring TCP Window Scaling Parameters for configuring window scaling Show ns tcpParam ExampleWSVal Enabled Configuring Selective AcknowledgmentTo enable Sack by using the Configuration Utility Clearing the ConfigurationLevel Parameters for clearing a configurationTo clear a configuration by using the configuration utility Viewing the Http Band StatisticsRespBandSize ReqBandSizeBuilt-in Http Profiles Built-in profile Description Configuring Http ProfilesTo modify the band range by using the configuration utility To add an Http profile by using the NetScaler command lineParameters for adding an Http profile Configuring TCP Profiles To add an Http profile by using the configuration utilityBuilt-in TCP Profiles Built-in profile Description To add a TCP profile by using the NetScaler command line Parameters for creating a TCP profile To add a TCP profile by using the configuration utility Specifying a TCP Buffer Size Example BufferSize Parameters for setting the TCP buffer size in a TCP profileSpecifying the MSS Value in a TCP Profile Parameters for specifying the MSS value in a TCP profileMss Learn MSS for VServer LearnVsvrMSS Advanced Configurations 148 Web Interface Prerequisites How Web Interface WorksInstalling the Web Interface Configuring the Web Interface Web Interface tar file pathJRE tar file path Parameters for configuring Web interface sites Port Gateway Direct ModeAuthentication Point Access Gateway URLTransport Configuring a Web Interface Site for LAN Users Using HttpXML Service Addresses XML Service PortSite Type Published Resource Type Kiosk Mode A Web Interface Site Configured for LAN Users Using HttpVirtual Server Protocol select Https IP Address Port Add service WILoopbackService 127.0.0.1 Http A Web Interface Site Configured for LAN Users Using Https Configuring a Web Interface Site for LAN Users Using Https160 161 Add lb vserver Httpswi SSL 10.102.29.3 Configuring a Web Interface Site for Remote Users Using Agee A Web Interface Site Configured for Remote Users Using Agee 165 166 AppFlow NetScaler Flow Sequence How AppFlow WorksTemplates Flow RecordsConfiguring the AppFlow Feature Enabling or Disabling the AppFlow Feature To specify a collector by using the NetScaler command lineSpecifying a Collector Parameters for specifying a collector Configuring an AppFlow ActionTo remove a collector by using the NetScaler command line To specify a collector by using the configuration utilityParameters for configuring an AppFlow action CollectorsComment Show appflow policy name Configuring an AppFlow PolicyRule Action Parameters for configuring an AppFlow policyHttp To add an expression by using the Add Expression dialog boxShow appflow global Binding an AppFlow PolicyLabelName Parameters for binding an AppFlow policyGotoPriorityExpression Invoke Invoke flag LabelTypeClick Apply Changes Enabling AppFlow for Virtual ServersSetting the AppFlow Parameters Enabling AppFlow for a ServiceAppFlow Parameters HttpHost HttpCookieHttpReferer HttpMethodReporting Tool Using the Reporting Tool To invoke the Reporting toolWorking with Reports Creating and Deleting Reports Using Built-in ReportsTime Intervals Time interval Displays Modifying the Time IntervalExporting and Importing Custom Reports Setting the Data Source and Time ZoneWorking with Charts Adding a ChartModifying a Chart To change the graph type of a chart Viewing a ChartTo view numeric data for a graph To change the color and graph type of a data set Deleting a Chart To export chart data to ExcelExamples Limits on Entity Numbers Retrieved by nscollect Entity name Stopping and Starting the Data Collection UtilityNetscaler/nscollect stop To stop nscollectTo start nscollect on the local system Entity name LimitNetscaler/nscollect start To start nscollect on the remote system