Getting Service and Support | Citrix Systems CITRIX NETSCALER 9.3

Citrix NetScaler Administration Guide

Getting Service and Support

Citrix® offers a variety of resources for support with your Citrix environment, including the following:

wThe Knowledge Center is a self-service, Web-based technical support database that contains thousands of technical solutions, including access to the latest hotfixes, service packs, and security bulletins.

wTechnical Support Programs for both software support and appliance maintenance are available at a variety of support levels.

wThe Subscription Advantage program is a one-year membership that gives you an easy way to stay current with the latest product version upgrades and enhancements.

wCitrix Education provides official training and certification programs on virtually all Citrix products and technologies.

For more information about Citrix services and support, see the Citrix Systems Support Web site at http://www.citrix.com/lang/English/support.asp.

You can also participate in and follow technical discussions offered by the experts on various Citrix products at the following sites:

whttp://community.citrix.com

whttp://twitter.com/citrixsupport

whttp://forums.citrix.com/support

NetScaler Documentation Feedback

You are encouraged to provide feedback and suggestions so that we can enhance the documentation. You can send an email to nsdocs_feedback@citrix.com. In the subject line, specify "Documentation Feedback." Please include the title of the guide and the page number in the email message.

You can also provide feedback through the Knowledge Center at http:// support.citrix.com/.

To provide feedback at the Knowledge Center home page

1.Go to the Knowledge Center home page at http://support.citrix.com/.

2.On the Knowledge Center home page, under Products, expand NetScaler, and then click the NetScaler release for which you want to provide feedback.

3.On the Documentation tab, click the guide name, and then click Article Feedback.

4.On the Documentation Feedback page, complete the form, and then click Submit.

19

Image 19

Citrix Systems CITRIX NETSCALER 9.3 manual Getting Service and Support, NetScaler Documentation Feedback

Contents

Citrix NetScaler Administration Guide Copyright and Trademark Notice Page Page Contents Snmp Vii Audit Logging Web Server Logging 105 Advanced Configurations Contents Web Interface AppFlow Reporting Tool Contents Xvi This Preface Formatting Conventions for NetScaler DocumentationFormatting Conventions Meaning Boldface Convention Documentation Available on the NetScaler ApplianceTo view the documentation NetScaler Documentation Feedback Getting Service and SupportTo provide feedback at the Knowledge Center home Preface Topics Authentication and Authorization Configuring User Accounts Configuring Users and GroupsShow system user Example UserName User Name Parameters for configuring a user accountPassword Password Timeout CLI Idle Session Timeout Secs To create a user group by using the NetScaler command line Configuring User GroupsShow system group Example Show system group groupName Example UserName Parameters for configuring a user groupShow system group groupName GroupName Group Name Built-in Command Policies Configuring Command PoliciesCLI Prompt CLI Idle Session Timeout Secs Runningconfig, and sh gslb Creating Custom Command PoliciesBuilt-in Command Policies Policy name Allows Except show runningconfig, show Command specification regular expression Matches these commands Action Parameters for configuring a command policySh system cmdPolicy Example Policyname Binding Command Policies to Users and Groups Priority Parameters for binding a command policy to a userSh system user userName Example Sh system user userName GroupName Parameters for binding a command policy to a groupSh system group groupName Example Sh system group groupName To reset the nsroot password Resetting the Default Administrator nsroot Password Fsck /dev/ad0s1a Mount /dev/ad0s1a /flash Example of a User Scenario Sample Values for Creating Entities Field Configuration steps Configuring External User Authentication Configuring Ldap Authentication Examples of Bind Distinguished Name Ldap server Examples of Base Distinguished Name Ldap server Base DNBind DN Authentication Type, select LDAP. Next to Server, click New Determining attributes in the Ldap directory Choosing Radius authentication protocols Configuring Radius AuthenticationAuthentication Type, select Radius Configuring IP address extraction Configuring NT4 Authentication Configuring TACACS+ AuthenticationAuthentication Type, select Tacacs Authentication Type, select NT4 Authentication and Authorization Snmp Importing MIB Files to the Snmp Manager and Trap Listener Enable snmp alarm alarm name Sh snmp alarm alarm name Enabling or Disabling an Snmp Alarm Severity Configuring AlarmsTo configure an Snmp alarm by using the command line Parameters for configuring Snmp alarms To configure Snmp alarms by using the configuration utility Configuring TrapsTo add an Snmp trap by using the NetScaler command line To configure Snmp Traps by using the configuration utility Parameters for configuring Snmp traps Enabling Unconditional Snmp Trap Logging SnmpTrapLogging Snmp Trap Logging Configuring the NetScaler for Snmp v1 and v2 QueriesSpecifying an Snmp Manager Parameters for unconditional Snmp trap logging Show snmp manager To add an Snmp manager by using the NetScaler command line IPAddress Parameters for configuring an Snmp manager To add an Snmp manager by using the configuration utility Permissions Parameters for configuring an Snmp community stringSpecifying an Snmp Community Sh snmp community Configuring an Snmp Alarm for Throughput or PPS Configuring Snmp Alarms for Rate LimitingCommunity String*-communityName Show snmp alarm PF-RL-RATE-THRESHOLD State Show snmp alarm PF-RL-PPS-THRESHOLDThresholdValue NormalValue Alarm Threshold-thresholdValue Normal Threshold-normalValue Configuring Snmp Alarm for Dropped Packets Parameters for configuring an Snmp alarm for dropped packets Configuring the NetScaler for SNMPv3 Queries Setting the Engine ID To set the engine ID by using configuration utility Configuring a ViewTo set the engine ID by using the NetScaler command line Parameters for setting the engine ID Parameters for configuring an Snmp view Configuring a GroupTo add an Snmp group by using the NetScaler command line SecurityLevel Configuring a UserParameters for configuring an Snmp group To configure a user by using the NetScaler command line Parameters for configuring an Snmp user Citrix NetScaler Administration Guide Snmp Audit Logging Audit Logging Configuring Audit Servers Configuring the NetScaler Appliance for Audit LoggingShow audit syslogAction name ServerPort Parameters for configuring auditing serversShow audit nslogAction name ServerIP Log levels defined To configure an auditing server action Configuring Audit PoliciesTo configure a Syslog policy by using the command line Parameters for configuring audit policies To configure an Nslog policy by using the command lineRule Name* name Server* action To configure an audit server policyBinding the Audit Policies Globally Parameters for binding the audit policies globally Pre Requisites Configuring Policy-Based LoggingConfiguring an Audit Message Action To globally bind the audit policy StringBuilderExpr BypassSafetyCheckLogtoNewnslog Binding Audit Message Action to a Policy Installing and Configuring the Nslog Server Supported Platforms for the Nslog Server Operating system Installing Nslog Server on the Linux Operating SystemSoftware requirements Installing Nslog Server on the FreeBSD Operating System Pkgdelete NSaudserver Pkginfo grep NSaudserver On the system, where you have downloaded the Nslog package To install Nslog server on a Windows operating system Audserver -stop Nslog Server Command OptionsTo uninstall the Nslog server on a Windows operating system Audserver -remove Audserver -remove Specifies To add the IP addresses of the NetScaler appliance Running the Nslog Server Verifying the Nslog Server Configuration FileTo start audit server logging Creating Filters Customizing Logging on the Nslog ServerTo create a filter Specifying Log Properties Default Settings for the Log Properties Following is a sample configuration file Sample Configuration File audit.conf Web Server Logging Enabling or Disabling Web Server Logging Configuring the NetScaler Appliance for Web Server Logging Buffer Size Modifying the Default Buffer SizeParameter for modifying the buffer size Sh weblogparam Example Supported Platforms for the Nswl Client Operating system To modify the buffer size by using the configuration utility Hardware requirements Installing Nswl Client on a Solaris Operating SystemCp pathtocd/Utilities/weblog/Solaris/NSweblog.tar /tmp Pkginfo grep NSweblog Installing Nswl Client on a Linux Operating SystemCd /tmp Tar xvf NSweblog.tar To view the installed Web server logging files Installing Nswl Client on a FreeBSD Operating SystemTo get more information about the NSweblog RPM file Pkgdelete NSweblog Installing Nswl Client on a Mac OS Operating SystemCp pathtocd/Utilities/weblog/macos/NSweblog.tgz /tmp To install the Nswl client on a Windows system Installing Nswl Client on a Windows Operating System Rpm -i NSweblog.rpm Installing Nswl Client on an AIX Operating SystemTo uninstall the Nswl client on a Windows system Cp pathtocd/Utilities/weblog/AIX/NSweblog.rpm /tmp Nswl Command Options Nswl command Specifies Nswl Client Command Options To add the Nsip address of the NetScaler appliance Adding the IP Addresses of the NetScaler ApplianceNswl -addns -f directorypath \log.conf Customizing Logging on the Nswl Client System Verifying the Nswl Configuration FileTo verify the configuration in the Nswl configuration file Running the Nswl Client On OFF Parameters for Creating a Filter Specifies To create a filter for a virtual server LogFormat Ncsa Ncsa Common Log Format Understanding the Ncsa and W3C Log Formats Ncsa Common Log Format Argument Specifies W3C Extended Log Format Directives EntriesDirective Descriptions Examples FieldsIdentifiers Prefix Descriptions Specifies Description W3C Extended Log Format Identifiers No Prefix Required Creating a Custom Log Format Creating a Custom Log Format by Using the Nswl LibraryField Description Creating a Custom Log Format Manually To create the custom log format by using the Nswl Library Creating Apache Log Formats Sample Configuration File Ncsa 11.Custom Log Format Argument Specifies Arguments for Defining a Custom Log Format Foobari Foobaro Formatt 12.Time Format Definition Argument Specifies Time Format Definition Argument Specifies 123 Web Server Logging 124 Advanced Configurations To add an NTP server by using the NetScaler command line Configuring Clock SynchronizationShow ntp server Example Maxpoll Parameters for configuring an NTP serverServerName Minpoll Enable ntp sync Disable ntp sync Configuring Clock Synchronization ManuallyStarting or Stopping the NTP Daemon Show ns config Example Usr/sbin/ntpd -c /nsconfig/ntp.conf -l /var/log/ntpd.logViewing the System Date and Time Configuring TCP Window Scaling Show ns tcpParam Example Parameters for configuring window scalingWSVal Enabled Configuring Selective Acknowledgment To enable Sack by using the Configuration Utility Clearing the Configuration Level Parameters for clearing a configurationTo clear a configuration by using the configuration utility Viewing the Http Band Statistics RespBandSize ReqBandSize Built-in Http Profiles Built-in profile Description Configuring Http ProfilesTo modify the band range by using the configuration utility To add an Http profile by using the NetScaler command line Parameters for adding an Http profile To add an Http profile by using the configuration utility Configuring TCP ProfilesBuilt-in TCP Profiles Built-in profile Description To add a TCP profile by using the NetScaler command line Parameters for creating a TCP profile To add a TCP profile by using the configuration utility Specifying a TCP Buffer Size Example BufferSize Parameters for setting the TCP buffer size in a TCP profile Parameters for specifying the MSS value in a TCP profile Specifying the MSS Value in a TCP ProfileMss Learn MSS for VServer LearnVsvrMSS Advanced Configurations 148 Web Interface Prerequisites How Web Interface Works Installing the Web Interface Web Interface tar file path Configuring the Web InterfaceJRE tar file path Parameters for configuring Web interface sites Port Gateway Direct ModeAuthentication Point Access Gateway URL Transport Configuring a Web Interface Site for LAN Users Using HttpXML Service Addresses XML Service Port Site Type Published Resource Type Kiosk Mode A Web Interface Site Configured for LAN Users Using Http Virtual Server Protocol select Https IP Address Port Add service WILoopbackService 127.0.0.1 Http A Web Interface Site Configured for LAN Users Using Https Configuring a Web Interface Site for LAN Users Using Https 160 161 Add lb vserver Httpswi SSL 10.102.29.3 Configuring a Web Interface Site for Remote Users Using Agee A Web Interface Site Configured for Remote Users Using Agee 165 166 AppFlow NetScaler Flow Sequence How AppFlow Works Templates Flow Records Configuring the AppFlow Feature To specify a collector by using the NetScaler command line Enabling or Disabling the AppFlow FeatureSpecifying a Collector Parameters for specifying a collector Configuring an AppFlow ActionTo remove a collector by using the NetScaler command line To specify a collector by using the configuration utility Collectors Parameters for configuring an AppFlow actionComment Show appflow policy name Configuring an AppFlow Policy Rule Action Parameters for configuring an AppFlow policy Http To add an expression by using the Add Expression dialog box Show appflow global Binding an AppFlow Policy LabelName Parameters for binding an AppFlow policyGotoPriorityExpression Invoke Invoke flag LabelType Click Apply Changes Enabling AppFlow for Virtual Servers Setting the AppFlow Parameters Enabling AppFlow for a Service AppFlow Parameters HttpHost HttpCookieHttpReferer HttpMethod Reporting Tool To invoke the Reporting tool Using the Reporting ToolWorking with Reports Creating and Deleting Reports Using Built-in Reports Time Intervals Time interval Displays Modifying the Time Interval Exporting and Importing Custom Reports Setting the Data Source and Time Zone Adding a Chart Working with ChartsModifying a Chart To change the graph type of a chart Viewing a Chart To view numeric data for a graph To change the color and graph type of a data set To export chart data to Excel Deleting a ChartExamples Limits on Entity Numbers Retrieved by nscollect Entity name Stopping and Starting the Data Collection Utility Netscaler/nscollect stop To stop nscollectTo start nscollect on the local system Entity name Limit Netscaler/nscollect start To start nscollect on the remote system