Let’s look at steps on configuring a Citrix high available site for applications. These are high level steps only. Not a step by step article. Based on your user count and how critical is the application, create 4 DDCs. Two in North India Datacenter, and two in south India datacenter (or you can create 1…
AAA Authentication methods: Netscaler supports 7 methods of authentication. Local: user account should be created locally on the netscaler. Authentication takes place without contacting external authentication server. LDAP: LDAP often uses Microsoft AD to validate users. It has 3 authentication types: Plaintext, SSL and TLS. Plaintext uses 389 for communication. Sends credentials in plain text….
Authentication Virtual Server: AAA TM(traffic management) virtual server acts as an authentication portal for content switching and load balancing virtual servers prompting users through form based or 401 login page before they can access their resources. AAA Process: User is redirected to form based or 401 login page using SSL. It then gathers user’s creds…
some or all steps are required to add external authentication on netscaler 12 and above: Create LDAP Server (authentication server). Create LDAP policy. Bind the LDAP policy globally. Add AD groups to netscaler to restrict access to management access. Optional Restrict normal users to netscaler gateway. Optional Create LDAP Server (authentication server): To create LDAP…
Netscaler is an Application delivery controller which is used for Load balancing, Http compression, SSL Offloading(which is useful for web servers),content switching, application acceleration, application firewall and more. A NetScaler appliance is usually deployed in front of a server farm and functions as a transparent TCP proxy between clients and servers, without requiring any client-side…
The OSI, or Open System Interconnection, model defines a networking framework for implementing protocols in seven layers. Control is passed from one layer to the next, starting at the application layer in one station, proceeding to the bottom layer, over the channel to the next station and back up the hierarchy. Easy Way to Remember…
Netscaler is available in either a hardware or software based appliance. Hardware options, MPX and SDX include single and multi-tenant devices, in addition to FIPS compliant and high SSL throughput appliances. Software-based options, VPX and CPX include virtual hypervisor-based and containerized microservice offerings. MPX: Available in burst packs and pay-as-you go grow options. Supports more…
Understanding NetScaler IP Addresses Basic Networking: Netscaler owned IP addresses: Netscaler IP (NSIP), MIP (Mapped IP), SNIP (Subnet IP), VIP (Virtual IP), GSLB site IP, Cluster IP. NetScaler IP (NSIP) address: The NSIP address (NetScaler IP Address) is the IP address which is used by the Administrator to manage and configure the NetScaler. It is…
A NetScaler appliance resides between the clients and the servers, so that client requests and server responses pass through it. In a typical installation, virtual servers configured on the appliance provide connection points that clients use to access the applications behind the appliance. In this case, the appliance owns public IP addresses that are associated…