User ManualTable of ContentsContents5Preface17Formatting Conventions for NetScaler Documentation17Documentation Available on the NetScaler Appliance18Getting Service and Support19NetScaler Documentation Feedback19Authentication and Authorization21Configuring Users and Groups22Configuring User Accounts22To create a user account by using the NetScaler command line22To modify or remove a user account by using the NetScaler command line23Parameters for configuring a user account23To configure a user account by using the configuration utility24Configuring User Groups24To create a user group by using the NetScaler command line24To modify or remove a user group by using the NetScaler command line25To bind a user to a group by using the NetScaler command line25To unbind a user from a group by using the NetScaler command line25Parameters for configuring a user group26To configure a user group by using the configuration utility26Configuring Command Policies27Built-in Command Policies27Creating Custom Command Policies28To create a command policy by using the NetScaler command line30To modify or remove a command policy by using the NetScaler command line30Parameters for configuring a command policy30To configure a command policy by using the configuration utility31Binding Command Policies to Users and Groups31To bind command policies to a user by using the NetScaler command line32To unbind command policies from a user by using the NetScaler command line32Parameters for binding a command policy to a user32To bind command policies to a user by using the configuration utility32To bind command policies to a group by using the NetScaler command line33To unbind command policies from a group by using the NetScaler command line33Parameters for binding a command policy to a group33To bind command policies to a group by using the configuration utility34Resetting the Default Administrator (nsroot) Password34To reset the nsroot password34Example of a User Scenario35Configuration steps36Configuring External User Authentication37Configuring LDAP Authentication38To configure LDAP authentication by using the configuration utility40Determining attributes in the LDAP directory41Configuring RADIUS Authentication42To configure RADIUS authentication by using the configuration utility42Choosing RADIUS authentication protocols42Configuring IP address extraction43Configuring TACACS+ Authentication44To configure TACACS+ authentication by using the configuration utility44Configuring NT4 Authentication44To configure NT4 authentication by using the configuration utility45Binding the Authentication Policies to the System Global Entity45To bind an authentication policy globally by using the configuration utility45To unbind a global authentication policy by using the configuration utility45SNMP47Importing MIB Files to the SNMP Manager and Trap Listener48To import the MIB files to the SNMP manager and trap listener48Configuring the NetScaler to Generate SNMPv1 and SNMPv2 Traps48Enabling or Disabling an SNMP Alarm49To enable or disable an SNMP alarm by using the command line49To enable or disable an SNMP alarm by using the configuration utility49Configuring Alarms50To configure an SNMP alarm by using the command line50Parameters for configuring SNMP alarms50To configure SNMP alarms by using the configuration utility51Configuring Traps51To add an SNMP trap by using the NetScaler command line51Parameters for configuring SNMP traps52To configure SNMP Traps by using the configuration utility52Enabling Unconditional SNMP Trap Logging53To enable or disable unconditional SNMP trap logging by using the NetScaler command line53Parameters for unconditional SNMP trap logging54To enable or disable unconditional SNMP trap logging by using the configuration utility54Configuring the NetScaler for SNMP v1 and v2 Queries54Specifying an SNMP Manager54To add an SNMP manager by using the NetScaler command line55To add an SNMP manager by specifying its IP address, using the NetScaler command line55To add an SNMP manager by specifying its host name, using the NetScaler command line56Parameters for configuring an SNMP manager56To add an SNMP manager by using the configuration utility57Specifying an SNMP Community58To specify an SNMP community by using the NetScaler command line58Parameters for configuring an SNMP community string58To configure an SNMP community string by using the configuration utility58To remove an SNMP community string by using the configuration utility59Configuring SNMP Alarms for Rate Limiting59Configuring an SNMP Alarm for Throughput or PPS59To configure an SNMP alarm for the throughput rate by using the NetScaler command line60To modify or remove the threshold values by using the NetScaler command line60To modify or remove the threshold values by using the NetScaler command line61Parameters for configuring an SNMP alarm for throughput or PPS61To configure an SNMP alarm for throughput or PPS by using the configuration utility62Configuring SNMP Alarm for Dropped Packets62To configure an SNMP alarm for packets dropped because of excessive throughput, by using the NetScaler command line62To configure an SNMP alarm for packets dropped because of excessive PPS, by using the NetScaler command line62Parameters for configuring an SNMP alarm for dropped packets63To configure an SNMP alarm for dropped packets by using the configuration utility63Configuring the NetScaler for SNMPv3 Queries63Setting the Engine ID64To set the engine ID by using the NetScaler command line65Parameters for setting the engine ID65To set the engine ID by using configuration utility65Configuring a View65To add an SNMP view by using the NetScaler command line65Parameters for configuring an SNMP view66To configure an SNMP view by using the configuration utility66Configuring a Group66To add an SNMP group by using the NetScaler command line66Parameters for configuring an SNMP group67To configure an SNMP group by using the configuration utility67Configuring a User67To configure a user by using the NetScaler command line67Parameters for configuring an SNMP user68To configure an SNMP user by using the configuration utility68Audit Logging71Configuring the NetScaler Appliance for Audit Logging73Configuring Audit Servers73To configure a SYSLOG server action by using the command line73To configure an NSLOG server action by using the command line74Parameters for configuring auditing servers74Log levels defined75To configure an auditing server action76Configuring Audit Policies76To configure a SYSLOG policy by using the command line76To configure an NSLOG policy by using the command line77Parameters for configuring audit policies77To configure an audit server policy78Binding the Audit Policies Globally78To configure a SYSLOG policy by using the command line78Parameters for binding the audit policies globally78To globally bind the audit policy79Configuring Policy-Based Logging79Pre Requisites79Configuring an Audit Message Action79Binding Audit Message Action to a Policy81Installing and Configuring the NSLOG Server81Installing NSLOG Server on the Linux Operating System82To install the NSLOG server package on a Linux operating system82To uninstall the NSLOG server package on a Linux operating system83Installing NSLOG Server on the FreeBSD Operating System83To download NSLOG package from www.Citrix.com83To install the NSLOG server package on a FreeBSD operating system84To uninstall the NSLOG server package on a FreeBSD operating system84Installing NSLOG Server Files on the Windows Operating System84To download NSLOG package from www.Citrix.com85To install NSLOG server on a Windows operating system85To uninstall the NSLOG server on a Windows operating system86NSLOG Server Command Options86Adding the NetScaler Appliance IP Addresses on the NSLOG Server87To add the IP addresses of the NetScaler appliance87Verifying the NSLOG Server Configuration File88Running the NSLOG Server88To start audit server logging88To stop audit server logging that starts as a background process in FreeBSD or Linux88To stop audit server logging that starts as a service in Windows88Customizing Logging on the NSLOG Server89Creating Filters89To create a filter89Specifying Log Properties90Default Settings for the Log Properties91Sample Configuration File (audit.conf)92Web Server Logging93Configuring the NetScaler Appliance for Web Server Logging94Enabling or Disabling Web Server Logging94To enable or disable Web server logging by using the NetScaler command line94To enable or disable Web server logging by using the configuration utility95Modifying the Default Buffer Size95To modify the buffer size by using the NetScaler command line95Parameter for modifying the buffer size95To modify the buffer size by using the configuration utility96Installing and Configuring the Client System for Web Server Logging96Installing NSWL Client on a Solaris Operating System97To install the NSWL client package on a Solaris operating system97To uninstall the NSWL client package on a Solaris operating system98Installing NSWL Client on a Linux Operating System98To install the NSWL client package on a Linux operating system98To uninstall the NSWL client package on a Linux operating system99To get more information about the NSweblog RPM file99To view the installed Web server logging files99Installing NSWL Client on a FreeBSD Operating System99To install the NSWL client package on a FreeBSD operating system99To uninstall the NSWL client package on a FreeBSD operating system100Installing NSWL Client on a Mac OS Operating System100To install the NSWL client package on a Mac OS operating system100To uninstall the NSWL client package on a Mac OS operating system101Installing NSWL Client on a Windows Operating System101To download NSWL client package from www.Citrix.com101To install the NSWL client on a Windows system101To uninstall the NSWL client on a Windows system102Installing NSWL Client on an AIX Operating System102To install the NSWL client package on an AIX operating system102To uninstall the NSWL client package on an AIX operating system102To get more information about the NSweblog RPM file103To view the installed Web server logging files103NSWL Client Command Options103Adding the IP Addresses of the NetScaler Appliance104To add the NSIP address of the NetScaler appliance104Verifying the NSWL Configuration File105To verify the configuration in the NSWL configuration file105Running the NSWL Client105To start Web server logging105To stop Web server logging started as a background process on the Solaris or Linux operating systems105To stop Web server logging started as a service on the Windows operating system105Customizing Logging on the NSWL Client System105Creating Filters106To create a filter107To create a filter for a virtual server107Specifying Log Properties107Understanding the NCSA and W3C Log Formats109NCSA Common Log Format109W3C Extended Log Format110Entries111Directives111Fields112Identifiers112Creating a Custom Log Format114Creating a Custom Log Format by Using the NSWL Library114Creating a Custom Log Format Manually115Creating Apache Log Formats116Sample Configuration File116Arguments for Defining a Custom Log Format118Time Format Definition121Advanced Configurations125Configuring Clock Synchronization126Setting Up Clock Synchronization by Using the CLI or the Configuration Utility126To add an NTP server by using the NetScaler command line126To modify or remove NTP servers by using the NetScaler command line127Parameters for configuring an NTP server127To configure an NTP server by using the configuration utility127Starting or Stopping the NTP Daemon128To enable or disable NTP synchronization by using the NetScaler command line128To enable or disable NTP synchronization by using the configuration utility128Configuring Clock Synchronization Manually128To enable clock synchronization on your NetScaler by modifying the ntp.conf file128Viewing the System Date and Time129To view the system date and time by using the NetScaler command line129To view the system date and time by using the configuration utility130Configuring TCP Window Scaling130To configure window scaling by using the NetScaler command line131Parameters for configuring window scaling131To configure window scaling by using the configuration utility132Configuring Selective Acknowledgment132To enable Selective Acknowledgment (SACK) by using the NetScaler command line132To enable SACK by using the Configuration Utility133Clearing the Configuration133To clear a configuration by using the NetScaler command line133Parameters for clearing a configuration134To clear a configuration by using the configuration utility134Viewing the HTTP Band Statistics134To view HTTP request and response size statistics by using the NetScaler command line134To view HTTP request and response size statistics by using the configuration utility135To modify the band range by using the NetScaler command line135Parameters for modifying the band range for HTTP request or response size statistics135To modify the band range by using the configuration utility136Configuring HTTP Profiles136To add an HTTP profile by using the NetScaler command line136Parameters for adding an HTTP profile137To add an HTTP profile by using the configuration utility138Configuring TCP Profiles138To add a TCP profile by using the NetScaler command line139Parameters for creating a TCP profile140To add a TCP profile by using the configuration utility141Specifying a TCP Buffer Size142To set the TCP buffer size in an entity-level TCP profile by using the NetScaler command line142Example143To set the TCP buffer size in the global TCP profile by using the NetScaler command line143Example143Parameters for setting the TCP buffer size in a TCP profile144To set the TCP buffer size in a TCP profile by using the NetScaler configuration utility144Optimizing the TCP Maximum Segment Size for a Virtual Server Configuration144Specifying the MSS Value in a TCP Profile145To specify the MSS value in a TCP profile by using the NetScaler command-line145Parameters for specifying the MSS value in a TCP profile145To specify the MSS value in a TCP profile by using the NetScaler configuration utility145Configuring the NetScaler to Learn the MSS Value from Bound Services146To configure the NetScaler to learn the MSS for a virtual server by using the NetScaler command-line146Parameters for configuring the NetScaler to learn the MSS for a virtual server147To configure the NetScaler to learn the MSS for a virtual server by using the NetScaler configuration utility147Web Interface149How Web Interface Works150Prerequisites150Installing the Web Interface151To install the Web interface and JRE tar files by using the NetScaler command line151Parameters for installing the Web interface and JRE tar files152To install the Web interface and JRE tar files by using the configuration utility152Configuring the Web Interface152Parameters for configuring Web interface sites153Configuring a Web Interface Site for LAN Users Using HTTP155To configure a Web interface site for LAN users using HTTP by using the configuration utility156To configure a Web interface site for LAN users using HTTP by using the command line158Configuring a Web Interface Site for LAN Users Using HTTPS159To configure a Web interface site for LAN users using HTTPS by using the configuration utility159To configure a Web interface site for LAN users using HTTPS by using the command line161Configuring a Web Interface Site for Remote Users Using AGEE163To configure a Web interface site for remote users using AGEE by using the configuration utility164To configure a Web interface site for remote users using AGEE by using the command line165AppFlow167How AppFlow Works168Flow Records169Templates169Configuring the AppFlow Feature170Enabling or Disabling the AppFlow Feature171To enable or disable the AppFlow feature by using the NetScaler command line171To enable the AppFlow feature by using the configuration utility171Specifying a Collector171To specify a collector by using the NetScaler command line171To remove a collector by using the NetScaler command line172Parameters for specifying a collector172To specify a collector by using the configuration utility172Configuring an AppFlow Action172To configure an AppFlow action by using the NetScaler command line172To modify or remove an AppFlow action by using the NetScaler command line173Parameters for configuring an AppFlow action173To configure an AppFlow action by using the configuration utility174Configuring an AppFlow Policy174To configure an AppFlow policy by using the NetScaler command line174To modify or remove an AppFlow policy by using the NetScaler command line175Parameters for configuring an AppFlow policy175To configure an AppFlow policy by using the configuration utility176To add an expression by using the Add Expression dialog box176Binding an AppFlow Policy177To globally bind an AppFlow policy by using the NetScaler command line177To bind an AppFlow policy to a specific virtual server by using the NetScaler command line178Parameters for binding an AppFlow policy178To globally bind an AppFlow policy by using the configuration utility178To bind an AppFlow policy to a specific virtual server by using the configuration utility179Enabling AppFlow for Virtual Servers179To enable AppFlow for a virtual server by using the NetScaler command line179To enable AppFlow for a virtual server by using the configuration utility179Enabling AppFlow for a Service180To enable AppFlow for a service by using the NetScaler command line180To enable AppFlow for a service by using the configuration utility180Setting the AppFlow Parameters180To set the AppFlow Parameters by using the NetScaler Command Line180To return AppFlow parameters to their default values by using the NetScaler command line181AppFlow Parameters181To set the AppFlow parameters by using the configuration utility182Reporting Tool183Using the Reporting Tool184To invoke the Reporting tool184Working with Reports184Using Built-in Reports185Creating and Deleting Reports185Modifying the Time Interval186Setting the Data Source and Time Zone187Exporting and Importing Custom Reports187Working with Charts188Adding a Chart188Modifying a Chart188Viewing a Chart189Deleting a Chart192Examples192To display the trend report for CPU usage and memory usage for the last week192To compare the bytes received rate and the bytes transmitted rate between two interfaces for the last week192Stopping and Starting the Data Collection Utility193To stop nscollect194To start nscollect on the local system194To start nscollect on the remote system195Example195Size: 1.85 MBPages: 195Language: EnglishOpen manual
