Citrix SD-WAN Platforms

Installing SD-WAN Appliances on the Microsoft Hyper-V Platform

To install NetScaler SD-WAN virtual appliances on Microsoft Windows Server, you must first install Windows Server, with the Hyper-V role enabled, on a machine with adequate system resources. While installing the Hyper-V role, be sure to specify the network interface cards (NICs) on the server that Hyper-V uses to create the virtual networks. You can reserve some NICs for the host. Use Hyper-V Manager to perform the SD-WAN VPX installation.

SD-WAN VPX for Hyper-V is delivered in virtual hard disk (VHD) format. It includes the default configuration for elements such as CPU, network interfaces, and hard-disk size and format. After you install an SD-WAN VPX instance, you can configure its network adapters, add virtual NICs, assign the SD-WAN IP address, subnet mask, and gateway, and complete the basic configuration of the virtual appliance.

Microsoft Server Hardware Requirements

  • The server’s processor must support Intel Virtualization Technology.
  • The server must run 64-bit Windows 2008 R2 SP1 (Standard, Enterprise, or data center Editions), or 2012 (Standard or data center Editions) with a full installation (not a Core installation), and the Hyper-V component enabled.
  • Minimum system configuration is 4 GB RAM, 200 GB hard drive, and 2 physical CPU.
  • Two physical Ethernet NICs are required. Three are recommended.


The procedure below uses three NICs.

For more information about Windows Server 2008 R2 system requirements, see exact location is subject to change by Microsoft at any time).

For information about installing Microsoft Server 2008 R2, see exact location is subject to change by Microsoft at any time).

Prerequisites for Installing SD-WAN virtual appliances on the Microsoft Hyper-V platform

Before you begin installing a virtual appliance, do the following:

To download the SD-WAN VPX setup files

  1. In a web browser, go to and click My Citrix.
  2. Type your user name and password.
  3. Click Downloads.
  4. In Search Downloads by Product, select NetScaler SD-WAN.
  5. Under Virtual Appliances, select and download the required SD-WAN VPX distribution.
  6. Copy the compressed file to your server.

To configure virtual NICs on the SD-WAN VPX

  1. Log on to the Windows Server as an Administrator, either at a keyboard or VGA console, or through a NIC that you plan to use for managing the virtual appliance (not at one of the ports that you use for the accelerated bridge).
  2. To start Hyper-V Manager, click Start, point to Administrative Tools, and then click Hyper-V Manager.
  3. In the navigation pane, under Hyper-V Manager, select the server on which you want to install SD-WAN VPX.
  4. On the Actions menu, click Virtual Network Manager
  5. In the Virtual Network Manager window, in the navigation pane, under Virtual Networks, click New virtual network.
  6. Choose External as type of virtual network, and then click Add.
  7. Name the new virtual network as apA Network 1 and select the physical NIC to map it to.
  8. Click OK to apply the changes.
  9. The Apply Networking Changes popup displays a caution indicating that pending changes might disrupt network connectivity. Click Yes.
  10. Repeat steps 5–9 for the second accelerated bridge port. Name it as apA Network 2 and connect it to a different physical port.
  11. Click Apply to apply the networking changes.

Installing SD-WAN VPX on Microsoft Server with Hyper-V Manager

After you have enabled the Hyper-V role on Microsoft Server and extracted the VPX files, you can use Hyper-V Manager to install SD-WAN VPX. After you import the virtual machine, you must configure the virtual NICs by associating them with the virtual networks created by Hyper-V. Based on the Microsoft server you are using, see the procedures in the following links to complete the installation.


  • From 10.2.6 and 11.0.3 release onwards, it is mandatory to change the default admin user account password while provisioning any SD-WAN appliance or deploying a new SD-WAN SE VPX. This change is enforced using both CLI and UI.

  • A system maintenance account - CBVWSSH, exists for development and debugging and has no external login permissions. The account can only be accessed through a regular administrative user’s CLI session.

Installing SD-WAN Appliances on the Microsoft Hyper-V Platform