ag vpx getting started

Post on 07-Apr-2018

230 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/6/2019 AG VPX Getting Started

    1/26

    Getting Started

    with Access Gateway VPX

  • 8/6/2019 AG VPX Getting Started

    2/26

    Copyright and Trademark Notice

    Use of the product documented in this guide is subject to your prior acceptance of the End User License Agreement. A

    printable copy of the End User License Agreement is included with the installation media.

    Information in this document is subject to change without notice. Companies, names, and data used in examples herein

    are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any

    means, electronic or mechanical, for any purpose, without the express written permission of Citrix Systems, Inc.

    2009 Citrix Systems, Inc. All rights reserved.

    Citrix and ICA (Independent Computing Architecture) are registered trademarks and Citrix Access Gateway is a

    trademark of Citrix Systems, Inc. in the United States and other countries.

    Document code: January 5 2010 16:08:45

  • 8/6/2019 AG VPX Getting Started

    3/26

    Contents

    1 How to Use This Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5Documentation Conventions... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

    Getting Support and Training... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

    Subscription Advantage.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

    Knowledge Center Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

    Education and Training. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

    2 Access Gateway VPX. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9Citrix Access Gateway VPX Overview.......................................................10

    Citrix XenCenter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

    Example of an Access Gateway VPX Setup... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..11

    Prerequisites for Installing Access Gateway VPX... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..12

    XenServer Hardware Requirements....................................................12

    XenCenter System Requirements......................................................13

    Access Gateway VPX Licensing... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

    3 Downloading and Installing the Virtual Image.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .17Downloading the Virtual Image for Access Gateway Standard Edition. . . . . . . . . . . . . . . . . . . . .18

    Importing Access Gateway VPX to Citrix XenServer.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..18

    Installing Access Gateway VPX using Citrix XenCenter.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..18

    Deleting the Access Gateway Virtual Image.... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .19

    4 Configuring Access Gateway Settings.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .21

    Configuring Basic Settings using the XenCenter Console..................................22

    To configure basic settings... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

    Access Gateway Administration Tools.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .23

    Configuring Settings Using the Administration Portal.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .24

    Downloading and Installing the Administration Tool.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .24

    To open the Administration Portal... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .24

    To download the Administration Tool... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..25

    To start the Administration Tool... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..25

    iii

  • 8/6/2019 AG VPX Getting Started

    4/26

    Contents

    iv

  • 8/6/2019 AG VPX Getting Started

    5/26

    Chapter 1

    How to Use This Guide

    Topics:

    Documentation Conventions

    Getting Support and Training

    Subscription Advantage

    Knowledge Center Alerts

    Education and Training

    This guide is intended for system administrators responsible

    for installing and configuring the Access Gateway VPX. This

    document assumes that administrators are familiar with

    Access Gateway configuration. This document also assumes

    that administrators are familiar with configuring Citrix

    XenServer and using Citrix XenCenter.

    5

  • 8/6/2019 AG VPX Getting Started

    6/26

  • 8/6/2019 AG VPX Getting Started

    7/26

    w A knowledge base containing thousands of technical solutions to support your Citrix

    environment

    w An online product documentation library

    w Interactive support forums for every Citrix product

    w Access to the latest hotfixes and service packs

    w Security bulletins

    w Online problem reporting and tracking (for organizations with valid support contracts)

    Another source of support, Citrix Preferred Support Services, provides a range of

    options that allows you to customize the level and type of support for your

    organizations Citrix products.

    Subscription AdvantageYour product includes a one-year membership in the Subscription Advantage program.

    The Citrix Subscription Advantage program gives you an easy way to stay current with

    the latest software version and information for your Citrix products. Not only do you

    get automatic access to download the latest feature releases, software upgrades, and

    enhancements that become available during the term of your membership, you also get

    priority access to important Citrix technology information.

    You can find more information on the Citrix Web site at http://www.citrix.com. On the

    home page, click Support>Subscription Advantage.

    You can also contact your sales representative, Citrix Customer Care, or a member of

    the Citrix Solutions Advisors program for more information.

    Knowledge Center AlertsThe Citrix Knowledge Center allows you to configure alerts, which notify you when the

    topic you are interested in is updated. You can set an alert on product categories.

    When there are updates to the product, you are notified of the update.

    To set up an alert, log on to the Citrix Support Web site at http://support.citrix.com/.

    After you are logged on, under Products, select a product. Under Alerts, click Add toyour Alerts. To remove an alert, go to the Knowledge Center product and click Remove

    from your Alerts.

    Education and TrainingCitrix offers a variety of instructor-led training and Web-based training solutions.

    Instructor-led courses are offered through Citrix Authorized Learning Centers (CALCs).

    CALCs provide high-quality classroom learning using professional courseware developed

    by Citrix. Many of these courses lead to certification.

    Getting Started

    7

    http://support.citrix.com/http://support.citrix.com/http://www.citrix.com/
  • 8/6/2019 AG VPX Getting Started

    8/26

    Web-based training courses are available through CALCs, resellers, and from the Citrix

    Web site.

    Information about programs and courseware for Citrix training and certification is

    available from http://www.citrixtraining.com/.

    Chapter 1 How to Use This Guide

    8

    http://www.citrixtraining.com/
  • 8/6/2019 AG VPX Getting Started

    9/26

    Chapter 2

    Access Gateway VPX

    Topics:

    Citrix Access Gateway VPX

    Overview

    Prerequisites for Installing

    Access Gateway VPX

    Access Gateway VPX

    Licensing

    Access Gateway VPX is a virtual appliance that delivers the

    same features and functionality as the Model 2010 physical

    appliance. You can deploy Access Gateway VPX as a virtual

    workload on your own hardware, in addition to or as an

    alternative to using a physical appliance. Access Gateway VPX

    includes the new Access Gateway Platform License, plus one

    year of Subscription Advantage.

    The initial release of Access Gateway VPX is based on AccessGateway 4.6.2, Standard Edition and is compatible with Citrix

    XenServer version 5.5.

    Product documentation is available for the following releases

    on Citrix eDocs:

    w Access Gateway 4.6, Standard Edition

    w Access Gateway 4.6.1, Standard Edition

    w Hotfix AGSE_v4.6.2 - Access Gateway Standard Edition

    4.6.2 Readme

    To obtain XenServer and XenCenter and learn more about

    hardware compatibility, visit http://www.citrix.com/xenserver.

    9

    http://www.citrix.com/xenserverhttp://www.citrix.com/xenserverhttp://support.citrix.com/article/CTX123563http://support.citrix.com/article/CTX123563http://support.citrix.com/proddocs/topic/access-gateway-46/agse-4-6-1-wrapper-con.htmlhttp://support.citrix.com/proddocs/topic/access-gateway/ag-se-46-edocs-landing.htmlhttp://edocs.citrix.com/
  • 8/6/2019 AG VPX Getting Started

    10/26

    Citrix Access Gateway VPX OverviewAccess Gateway VPX is a virtual Access Gateway appliance that is hosted on a Citrix

    XenServer system and managed by Citrix XenCenter. It supports all the features of a

    physical Access Gateway.

    Access Gateway VPX is a secure application access solution that provides administrators

    granular application-level control while empowering users with access from anywhere.

    It gives IT administrators a single point of control to manage access and actions based

    on both the user and the endpoint device, providing better risk, security and

    compliance management.

    Access Gateway VPX installs into your network and functions just as if you installed the

    physical appliance. The Access Gateway VPX is a virtual machine image that can be

    installed and run on any hardware device that supports Citrix XenServer 5.5 or later.

    This allows you to install Access Gateway Standard Edition software on standard x86hardware.

    The Access Gateway runs on a server virtualization platform that offers the same

    functionality as the physical appliance.

    The following diagram depicts the architecture of Access Gateway VPX on a hypervisor:

    The solution architecture has the following components:

    Hardware or physical layer:

    Physical hardware components including memory, CPU, network cards, and disk drives.

    Hypervisor:Thin layer of software that runs on top of the hardware. The Xen hypervisor gives

    each virtual machine a dedicated view of the hardware.

    Virtual machine:Operating system hosted on the hypervisor and appearing to the user as a separate

    physical computer. However, the machine shares physical resources with other virtual

    Chapter 2 Access Gateway VPX

    10

  • 8/6/2019 AG VPX Getting Started

    11/26

    machines, and it is portable because the virtual machine is abstracted from the

    physical hardware.

    For example, an Access Gateway VPX virtual appliance is installed on the hypervisorand uses drivers to access storage and network resources. It appears to the users as an

    independent Access Gateway appliance with its own network identity, user

    authorization and authentication capabilities, configuration, and data. The

    paravirtualization technique enables the virtual machines and the hypervisor to work

    together to achieve high performance for I/O and for CPU and memory virtualization.

    After you install the Access Gateway virtualized image, you can open the

    Administration Portal and download the Administration Tool.

    For more information about XenServer, see the XenServer documentation on the Citrix

    Support Web site.

    Citrix XenCenterXenCenter is a graphical virtualization-management interface for Citrix XenServer, that

    enables you to manage servers, resource pools, and shared storage, and to deploy,

    manage, and monitor virtual machines from your Windows desktop machine.

    Use XenCenter to install Access Gateway VPX on XenServer.

    For more information about XenCenter, see the XenServer documentation at Citrix

    Support Web site.

    Example of an Access Gateway VPX SetupAn Access Gateway VPX setup provides secure remote access to applications and data.

    The following diagram shows how Access Gateway VPX can be used to deliver secure

    application access.

    Getting Started

    11

    http://support.citrix.com/product/xens/v5.5/#tab-dochttp://support.citrix.com/product/xens/v5.5/#tab-dochttp://support.citrix.com/product/xens/v5.5/#tab-dochttp://support.citrix.com/product/xens/v5.5/#tab-dochttp://support.citrix.com/product/xens/v5.5/#tab-doc
  • 8/6/2019 AG VPX Getting Started

    12/26

    As shown in the figure, Access Gateway VPX, when deployed in front of application

    servers, acts as a secure entry point in the internal network for authenticated users.

    Prerequisites for Installing Access Gateway VPXBefore you begin installing Access Gateway VPX, do the following:

    w Obtain the Access Gateway VPX license files from your supplier or check for your

    nearest CSN partner at http://support.citrix.com/. You can also get support from

    Citrix Customer Service at http://www.citrix.com/. On the Support menu, clickCustomer Service.

    w Install XenServer version 5.5 or above on hardware that meets the minimum

    requirements.

    w Install XenCenter on a management workstation that meets the minimum system

    requirements.

    XenServer Hardware RequirementsThe following table describes the minimum specifications for the hardware on which

    XenServer runs Access Gateway VPX.

    Table 2-1. Minimum Hardware Requirements for XenServer Running Access Gateway

    VPX

    CPU One or more 64-bit x86 CPUs

    RAM At least 2 GB

    Disk space Locally attached storage (PATA, SATA,

    SCSI) with minimum 40 GB of disk space.

    General disk space requirements for

    Access Gateway VPX: XenServer

    installation creates a 4 GB partition for

    the XenServer host control domain;

    remaining space is available for Access

    Gateway VPX and other VMs.

    Network One 1 Gbps network adapter required;

    Recommended: Two network adapters of1 Gbps each

    To install XenServer, see the XenServer Installation Guide at http://support.citrix.com/

    article/CTX121751.

    The XenServer must provide adequate virtual computing resources to the Access

    Gateway VPX as listed in the following table.

    Chapter 2 Access Gateway VPX

    12

    http://support.citrix.com/article/CTX121751http://support.citrix.com/article/CTX121751http://support.citrix.com/article/CTX121751http://support.citrix.com/article/CTX121751http://www.citrix.com/http://support.citrix.com/
  • 8/6/2019 AG VPX Getting Started

    13/26

    Table 2-2. Virtual Computing Resources of Access Gateway VPX

    Memory 1 GB memory

    Virtual CPU (VCPU) One VCPU minimum, two VCPUs

    recommended for better performance

    Virtual Network Interfaces One or two

    Minimum Storage Requirement 12 GB

    XenCenter System RequirementsXenCenter is a Windows application. It cannot run on the same computer as the

    XenServer host. The following table describes the system requirements for XenCenter:

    Table 2-3. System Requirements for XenCenter Installation

    Operating system Windows XP, Windows Server 2003,

    Windows Vista or Windows 7.

    .NET framework Version 2.0 or above.

    CPU 750 MHz minimum, 1 GHz or faster

    recommended.

    RAM 1 GB Minimum, 2 GB recommended.

    Network 100 Mbps or faster network adapter.

    Access Gateway VPX LicensingThe Access Gateway VPX comes with the Access Gateway Platform License. The

    platform license provides access to Citrix XenApp and XenDesktop resources only and

    provides support for Citrix Receiver and Dazzle. The platform license allows users to

    log on using Citrix online plug-ins and connect to a XenApp server to retrieve their list

    of applications or a XenDesktop server to get to their published desktops.

    When the Access Gateway Platform license is installed, it supports Citrix Receiver. If

    users connect with Citrix Receiver through the Access Gateway, the Access Gateway Plug-

    in must be installed.

    w A user license is required in addition to a platform license if users log on using the

    Access Gateway Plug-in. When just the platform license is installed, a VPN tunnel

    that allows users to access only the Citrix Receiver Merchandising Server and the

    Web Interface is enabled. Other resources are not available to users unless an

    Access Gateway Standard license or Access Gateway Universal user license is installed.

    w When neither an Access Gateway Standard Edition license or an Access Gateway

    Universal license is available, users will only have access to published applications.

    Getting Started

    13

  • 8/6/2019 AG VPX Getting Started

    14/26

    Downloading and running streamed applications requires a full, unconstrained VPN

    tunnel through which users can access file shares or other network resources.

    When only the Access Gateway Platform license is installed, Access Gateway VPX allows

    the following types of connections:

    w ICA+SSL connections to XenApp initiated by the Citrix online plug-ins

    w ICA+SSL connections to XenDesktop initiated by the Citrix Desktop Receiver

    w Connections from Citrix Receiver to the Citrix Merchandising Server

    w Connections from Citrix Dazzle

    w Connection from the user's Web browser to a Citrix Web Interface site

    Support for user connections through Access Gateway to XenApp published applications

    or XenDesktop published desktops is now provided without requiring an Access Gateway

    user license for each connection. The platform license enables users to make basic

    connections to published applications or desktops.

    The Access Gateway platform license supports the following connection features:

    w Strong authentication

    w Integration with Citrix Web Interface to broker connections to XenApp or XenDesktop

    w Secure SSL relay of ICA session traffic

    w Compatibility with Citrix Receiver (published applications only)

    The Access Gateway platform license does not support the following connection

    features, which require an Access Gateway concurrent user license:

    wFull network-layer VPN tunneling

    w Endpoint Analysis

    w SmartAccess

    w Clientless access to email, Web sites, and file shares

    Access Gateway user licenses are used only for sessions in which users connect to

    resources other than XenApp or XenDesktop, or where endpoint analysis is used to

    determine the appropriate level of access for that session. The Access Gateway

    platform license allows Basic connections up to the maximum capacity of the appliance.

    Along with the platform license, the Access Gateway VPX supports the Access Gateway

    Universal license. When Access Gateway Universal Licenses are installed, users log on

    using the Access Gateway Plug-in. All features of the Access Gateway, including network-layer VPN access, are enabled. Because the platform license does not include support

    for the delivery of XenApp streamed application packages or any network-layer

    connections required by streamed applications running on the user device, you need an

    Access Gateway Standard or Universal license.

    Note: If Access Gateway Standard or Universal licenses are available, a license is

    consumed for each session regardless of that session's connection features.

    Chapter 2 Access Gateway VPX

    14

  • 8/6/2019 AG VPX Getting Started

    15/26

    For more information about the licenses that can be installed on Access Gateway

    Standard Edition appliances, see Access Gateway License Types in Citrix eDocs.

    After you install the license, continue configuring the virtual appliance just you would

    the physical appliance. For more information about installing certificates and

    configuring settings, see:

    w Creating and Installing Certificates

    w Configuration and Management of the Access Gateway

    Getting Started

    15

    http://support.citrix.com/proddocs/topic/access-gateway-46/agse-configuration-mgmt-wrapper-con.htmlhttp://support.citrix.com/proddocs/topic/access-gateway-46/agse-create-install-certificates-con.htmlhttp://support.citrix.com/proddocs/topic/access-gateway-46/agse-license-types-con.html
  • 8/6/2019 AG VPX Getting Started

    16/26

    Chapter 2 Access Gateway VPX

    16

  • 8/6/2019 AG VPX Getting Started

    17/26

    Chapter 3

    Downloading and Installing the VirtualImage

    Topics:

    Downloading the Virtual

    Image for Access Gateway

    Standard Edition

    Importing Access GatewayVPX to Citrix XenServer

    Installing Access Gateway

    VPX using Citrix XenCenter

    Deleting the Access Gateway

    Virtual Image

    You can download the Access Gateway virtual image, called

    CAG.xva, from My Citrix. After you download the image,

    install it on XenServer using the XenCenter Console. You can

    add multiple instances of the virtual image to XenServer and

    configure each of them with unique IP addresses. This is the

    same as installing multiple Access Gateway appliances in a

    rack in the DMZ in your network.

    17

  • 8/6/2019 AG VPX Getting Started

    18/26

    Downloading the Virtual Image for Access

    Gateway Standard EditionThe virtual image is a file with the name CAG.xva. The virtual image contains the

    package you need to install using XenCenter. You can get the virtual image from My

    Citrix after you have purchased Access Gateway VPX.

    1. Log on to My Citrix and click Downloads.

    2. Under Support, click Downloads.

    3. Under Search Downloads by Product, select Citrix Access Gateway.

    4. Under Product Software>Standard Edition, click Access Gateway VPX and save itto your computer.

    Importing Access Gateway VPX to CitrixXenServer

    To install Access Gateway VPX on XenServer, you must first install XenServer on a

    computer with adequate hardware resources. To perform the Access Gateway VPX

    installation, you use XenCenter, which must be installed on a remote computer that

    can connect to the XenServer host through the network. After you install Access

    Gateway VPX, you can create virtual hardware components on XenServer and allocate

    them to Access Gateway VPX using XenCenter.

    To use the virtualized image of the Access Gateway software, you need to obtain the

    exported virtual image file (.xva) and import it to Citrix XenServer using the XenCenter

    management console. For more information, see:

    w Prerequisites for Installing Access Gateway VPX on page 12

    w Downloading the Virtual Image for Access Gateway Standard Edition on page 18

    Installing Access Gateway VPX using CitrixXenCenter

    After you have installed and configured XenServer and XenCenter, you can use

    XenCenter to install Access Gateway VPX on XenServer. Each instance of Access

    Gateway VPX is a virtual Access Gateway appliance running the same firmware as a

    physical appliance (the minimum is Version 4.6.2).

    1. Start XenCenter on your computer.

    2. On the Server menu, click Add.

    Chapter 3 Downloading and Installing the Virtual Image

    18

  • 8/6/2019 AG VPX Getting Started

    19/26

    3. In the Add New Server dialog box, in Hostname, type the IP address or DNS nameof the XenServer to which you want to connect.

    4. In User Name and Password, type the administrator credentials, and then clickConnect.The XenServer name appears in the navigation pane with a green circle, which

    indicates that the XenServer is connected.

    5. In the navigation pane, click the name of the XenServer on which you want to

    install Access Gateway VPX.

    6. On the VM menu, click Import.

    7. In the Import dialog box, in Import file name, browse to the location to which yousaved the Access Gateway VPX .xva image file and click Open.

    8. Under Import type, click Exported VM, and then click Next

    9. Select the XenServer on which you want to install Access Gateway VPX, and then

    click Next.

    10. Select the local storage repository in which to place the Access Gateway VPX, and

    then click Import to begin the import process.

    11. You can add, modify, or delete virtual network interfaces. When finished, click

    Next.

    Note: The Access Gateway requires two network interfaces, one for the public

    (Internet) network and the second for the internal network. You cannot configure

    more than two network interfaces for Access Gateway VPX.

    12. Click Finish to complete the import process.

    Note: You can click the Log tab to view the status of the import process.

    13. If you want to install another Access Gateway VPX image file, repeat Steps 5

    through 11.

    When importing the Access Gateway virtual image is complete, you can then configure

    the basic settings for the appliance. See Configuring Basic Settings using the XenCenter

    Console on page 22 for information.

    Deleting the Access Gateway Virtual ImageIf a virtual image is no longer required, you can use XenCenter to delete the virtual

    image. Deleting a virtual image from XenServer is the same as disconnecting the

    physical appliance from your network and removing it from the rack.

    1. Start XenCenter on your computer.

    2. In the navigation pane, right-click an Access Gateway virtual image and click ShutDown.

    Getting Started

    19

  • 8/6/2019 AG VPX Getting Started

    20/26

    3. When the Access Gateway is shut down, right-click the virtual image and click

    Delete.

    4. Click Delete attached virtual disks and click OK.

    Note: If you do not delete the attached virtual disks, it consumes disk space in the

    XenServer resource pool.

    Chapter 3 Downloading and Installing the Virtual Image

    20

  • 8/6/2019 AG VPX Getting Started

    21/26

  • 8/6/2019 AG VPX Getting Started

    22/26

    Configuring Basic Settings using the XenCenter

    ConsoleAfter installing an instance of the Access Gateway VPX, you need to access it to

    configure the basic settings. When the installation is complete, configure settings on

    the Console tab in the XenCenter Console. You configure the basic settings of theAccess Gateway VPX just as you would for a physical appliance connected using a serial

    cable and the serial console. The XenCenter console has the same options as those in

    the serial console for the physical appliance.

    You can use the XenCenter serial console to set the IP address and subnet of the

    network adapter that is called Interface 0, as well as the IP address of the default

    gateway device. All other settings must be configured using the Administration Tool.

    You can also use the XenCenter serial console to test a connection with the ping command.Citrix recommends using both network adapters on the appliance to optimize inbound

    and outbound network traffic. Access Gateway VPX supports both one-arm and two-arm

    modes.

    w One-arm mode uses one XenServer virtual network interface for inbound and

    outbound connections. In one-arm mode, a single IP address is assigned to Access

    Gateway. The default configuration of Access Gateway is one-arm mode.

    w Two-arm mode uses two XenServer virtual network interfaces, one for external and

    one for internal connections. In two-arm mode, two IP address are assigned to

    Access Gateway, one for the external interface and one for the internal interface.

    After configuring the TCP/IP settings for Interface 0, use the Administration Tool to

    configure TCP/IP settings for Interface 1.

    The serial console provides the following options for configuring the Access Gateway:

    w [0] Express Setup configures the TCP/IP settings for Interface 0 on the AccessGateway Cluster>General Networking tab

    w [1] Ping is used to ping other network devices to check for connectivity

    w [2] Link Modes is used to set the duplex mode and speed mode for Interface 0 onthe Access Gateway Cluster>General Networking tab

    w [3] External Administration Port enables or disables connections to theAdministration Tool from a remote computer

    w [4] Display Log displays the Access Gateway log

    w [5] Reset Certificate resets the certificate to the default certificate that comeswith the Access Gateway

    w [6] Change Administrative Password allows you to change the default administratorpassword ofrootadmin

    Chapter 4 Configuring Access Gateway Settings

    22

  • 8/6/2019 AG VPX Getting Started

    23/26

    Important: Citrix recommends changing the administrator password before

    connecting the Access Gateway to your network. The new password can be six to

    127 characters long and cannot begin or end with a space.

    w [7] Help displays help information

    w [8] Log Out logs off of the Access Gateway

    To configure basic settings

    1. In the XenCenter Console, in the Resource pane, select Citrix Access Gateway.

    2. In the right pane, click the Console tab.

    3. Press Enter and log on using the default user name and password, root and

    rootadmin.4. To set the IP address and subnet mask and the default gateway device for Interface

    0, type 0 and press Enter to choose Express Setup. After you respond to theprompts, the information you entered appears. To commit your changes, type y.

    5. To verify that the Access Gateway can ping a connected network device, type 1and enter the IP address of the device.

    After you configure the basic settings for the appliance, you can then connect to the

    Administration Portal and download the Administration Tool. When the Administration

    Tool is installed on your computer, you can then configure additional settings. For more

    information, see the Access Gateway 4.6, Standard Edition documentation in the Citrix

    eDocs library.

    For more information about the Administration Portal and Administration Tool, see the

    following topics:

    w Access Gateway Administration Tools on page 23

    w Configuring Settings Using the Administration Portal on page 24

    w Downloading and Installing the Administration Tool on page 24

    Access Gateway Administration ToolsAccess Gateway administration uses a combination of the Administration Portal and the

    Administration Tool to administer the appliance and monitor network connections. TheAdministration Tool contains all Access Gateway configuration controls, except for

    administrative user account management, which is available only from the

    Administration Portal and the serial console. The Administration Portal provides

    downloads and administration of some Access Gateway settings.

    Getting Started

    23

  • 8/6/2019 AG VPX Getting Started

    24/26

    Configuring Settings Using the Administration

    PortalThe Administration Portal allows you to make basic configuration changes. On the

    Administration Portal, you can:

    w Change the administrator password

    w View Access Gateway logs

    w Upload certificates

    w Upload a saved configuration or a software upgrade

    w Save the Access Gateway configuration

    w Restart and shut down the Access Gateway

    On the Downloads page, you can do the following:

    w Download the Administration Tool

    w Download the Access Gateway documentation

    w Download a portal page template

    w Download a sample email for users

    w Download Access Gateway-specific SNMP data

    Downloading and Installing the AdministrationTool

    After you configure the basic settings of Access Gateway VPX, you can open the

    Administration Portal and download the Administration Tool just as you would for a

    physical appliance.

    The Administration Portal provides a Web-based interface for administrators. There are

    several tabs in the Administration Portal that provide a convenient place to perform

    some administrative tasks on the Access Gateway.

    To open the Administration Portal

    1. In a Web browser, type https://AccessGatewayFQDN:9001/ where

    AccessGatewayFQDN is the host name of the appliance and 9001 is the

    administration port.

    You can also use the IP address of the appliance to open the Administration Portal.

    2. If a digital certificate signed by a Certificate Authority is not installed on the

    Access Gateway, a security alert dialog box appears. Click Yes.

    Chapter 4 Configuring Access Gateway Settings

    24

  • 8/6/2019 AG VPX Getting Started

    25/26

    3. Type the administrator user name and password. The default values are root and

    rootadmin.

    The Administration Portal opens.

    To download the Administration ToolThe Administration Tool allows you to configure global settings once and then publish

    them to multiple Access Gateway appliances on your network. You can also view

    appliance statistics and monitor network usage from the Administration Tool.

    The Administration Tool is downloaded from the Administration Portal and installed on

    a Windows computer in the secure network and makes it easy for you to configure

    network settings, authentication, users, and group policies.

    The left pane of the Administration Tool window displays Help information for the

    current tab. The online Help corresponds to the task you are completing.

    There is also an Alerts box located above the online help. Alerts inform you when thereis a problem with the Access Gateway, such as a missing license or certificate.

    Important: If you upgrade from a previous version of the Access Gateway, you must

    uninstall the Administration Tool using Add or Remove Programs in Control Panel and

    then install the latest version from the Administration Portal.

    1. In a Web browser, type the IP address and port number of the Access Gateway,

    such as https://ipAddress:9001and log on using administrator credentials.

    The Administration Portal communicates on port 9001.

    2. In the Administration Portal, click Downloads.

    3. Under Access Gateway Administration Tool, click Install the Access GatewayAdministration Tool and click Run.

    4. To install the Administration Tool, follow the instructions in the wizard.

    To start the Administration Tool

    1. Click Start>All Programs> Citrix>Access Gateway Administration Tool 4.6.2>Access Gateway Administration Tool 4.6.2 or click the icon on your desktop.

    2. In the Administrator Login dialog box, in Host (IP or FQDN), type the IP address of

    the Access Gateway.

    3. In Administrator Username, type root.

    4. In Administrator Password, type the default password rootadmin or the new

    password if it was changed using the serial console or Administration Portal and

    click Connect.

    When the Administration Tool is installed on your computer, you can then configure the

    rest of the settings for Access Gateway VPX. This includes installing licenses,

    Getting Started

    25

  • 8/6/2019 AG VPX Getting Started

    26/26

    configuring additional network settings and authentication and authorization. For more

    information, see the following topics in the Citrix eDocs library:

    w Installing Licenses on Access Gateway Standard Edition

    w Installing and Managing Certificates

    w Configuration and Management of the Access Gateway

    Chapter 4 Configuring Access Gateway Settings

    http://support.citrix.com/proddocs/topic/access-gateway-46/agse-configuration-mgmt-wrapper-con.htmlhttp://support.citrix.com/proddocs/topic/access-gateway-46/ag-certificate-wrapper-con.htmlhttp://support.citrix.com/proddocs/topic/access-gateway-46/agse-license-install-overview-con.htmlhttp://edocs.citrix.com/