- Release Notes
- NetScaler SDX Hardware and Component Compatibility Matrix
- Hardware Installation
- Getting Started with the Management Service User Interface
- Single Bundle Upgrade
Managing and Monitoring the NetScaler SDX Appliance
- Creating SDX Administrative Domains
- Managing RAID Disk Allocation on 22XXX Series SDX Appliances
- NetScaler SDX Licensing Overview
- SDX Resource Visualizer
- Managing Interfaces
- Jumbo Frames on NetScaler SDX Appliances
- Configuring SNMP on NetScaler SDX Appliances
- Configuring Syslog Notifications
- Configuring Mail Notifications
- Configuring SMS Notifications
- Monitoring and Managing the Real-Time Status of Entities Configured on NetScaler Devices
- Monitoring and Managing Events Generated on NetScaler Instances
- Call Home Support for NetScaler Instances on NetScaler SDX
- System Health Monitoring
- Configuring System Notification Settings
Configuring the Management Service
- Configuring Authentication and Authorization Settings
- Configuring the External Authentication Server
- Configuring Link Aggregation from the Management Service
- Configuring a Channel from the Management Service
- Access Control Lists
- Configuring Cluster Link Aggregation
- Configuring SSL Ciphers to Securely Access the Management Service
- Backing Up and Restoring the Configuration Data of the SDX Appliance
- Performing Appliance Reset
- Cascading External Authentication Servers
- Provisioning NetScaler Instances
- Managing Crypto Capacity
- Provisioning Third-Party Virtual Machines
- Deploying a Citrix NetScaler Secure Web Gateway Instance on an SDX Appliance
- Bandwidth Metering in NetScaler SDX
- Setting up a Cluster of NetScaler Instances
- Configuring and Managing NetScaler Instances
- Monitoring NetScaler Instances
- Using Logs to Monitor Operations and Events
Use Cases for NetScaler SDX Appliances
- Consolidation When the Management Service and the NetScaler Instances are in the Same Network
- Consolidation When the Management Service and the NetScaler Instances are in Different Networks
- Consolidation Across Security Zones
- NITRO API
Converting a NetScaler MPX Appliance to a NetScaler SDX Appliance
- Converting a NetScaler MPX 11515/11520/11530/11540/11542 Appliance to a NetScaler SDX 11515/11520/11530/11540/11542 Appliance
- Converting a NetScaler MPX 8005/8010/8015/8200/8400/8600/8800 Appliance to a NetScaler SDX 8010/8015/8400/8600 Appliance
- Converting a NetScaler MPX 24100 and 24150 Appliance to a NetScaler SDX 24100 and 24150 Appliance
- SDX Command Reference
Consolidation When the Management Service and the NetScaler Instances are in Different Networks
Apr 28, 2017
In certain cases, the appliance administrator might allow other administrators to perform administration tasks on individual instances. This can be safely done by giving an individual instance administrator login rights to just that instance. But, for security reasons, the appliance administrator might not want to allow the instance to be on the same network as the Management Service. This is a very common scenario in service provider environments, and it is becoming increasingly common in enterprises as they adopt virtualization and cloud architectures.
In the following example, the Management Service is in the 10.1.1.x network and the NetScaler instances are in the 10.1.2.x network. Interfaces 0/1 and 0/2 are the management interfaces, 1/1 to 1/8 are 1G data interfaces, and 10/1 to 10/4 are 10G data interfaces. Each instance has its own dedicated administrator and its own dedicated physical interface. Therefore, the number of instances is limited to the number of physical interfaces available on the appliance. VLAN filtering is not required, because each instance has its own dedicated interface. Optionally, disable VLAN filtering to configure up to 4096 VLANs per instance per interface. In this example, you do not need to configure an NSVLAN, because instances are not sharing a physical interface and there are no tagged VLANs. For more information about NSVLANs, see Adding a NetScaler Instance.
The following figure illustrates the above use case.
Figure 1. Network topology of an SDX appliance with Management Service and NetScaler NSIPs for Instances in different networks
As the appliance administrator, you have the option to keep the traffic between the Management Service and the NSIP addresses on the SDX appliance, or to force the traffic off the device if, for example, you want traffic to go through an external firewall or some other security intermediary and then return to the appliance.
The following table lists the names and values of the parameters used for provisioning NetScaler Instance 1 in this example.
|Parameter Name||Values for Instance 1|
|Total Memory (MB)||2048|
|Packets per second||1000000|
|Interface||0/2 and 1/1|
- On the Configuration tab, in the navigation pane, expand NetScaler Configuration, and then click Instances.
- In the NetScaler Instances pane, click Add.
- In the Provision NetScaler Wizard follow the instructions in the wizard to set the parameters to the values shown in the above table.
- Click Create, and then click Close. The NetScaler instance you provisioned appears in the NetScaler Instances pane.