Welcome to ISAserver.org

Citrix NFuse Xp1.0

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Server Publishing >> Citrix NFuse Xp1.0

Page: [1]

Message

<< Older Topic Newer Topic >>

Citrix NFuse Xp1.0 - 5.Nov.2002 4:05:00 PM

andyhd

Posts: 29
Joined: 25.Mar.2002
From: Worcestershire
Status: offline

Hi Everyone,
I am trying to publish a Citrix XP1.0 NFuse server for external clients. Are there any pointers for this as I seem to be having some problems publishing this though ISA server.

The server is an internal Citrix XP 1.0 Server with NFuse on the same port as IIS.

Any guide lines would be much appreciated.

Regards

Andy.

Post #: 1

Featured Links*

RE: Citrix NFuse Xp1.0 - 5.Nov.2002 11:29:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Andy,

are you talking about 1 Metaframe XP server or a Metaframe XP server farm? That can make a big difference!

Assuming there is only 1 Metaframe XP server, you should publish two protocols. First the NFuse server which is a regular web server and uses HTTP or HTTPS. You can use for that a web publishing rule.

Next, you must publish the ICA port of the Metaframe XP server for the real ICA session. To do that you must first create a protocol definition for the ICA protocol inbound (TCP port 1494 inbound). Then you create a server publishing rule and use the above protocol definition as mapped server protocol.

HTH,
Stefaan

(in reply to andyhd)

Post #: 2

RE: Citrix NFuse Xp1.0 - 6.Nov.2002 1:04:00 PM

andyhd

Posts: 29
Joined: 25.Mar.2002
From: Worcestershire
Status: offline

Thanks for the reply spouseele !

I'm nearly there I can almost taste it !

I have changed the iis authenication to clear text and and it now lets me see the farm. I thought great were there !

But when I launch an application it tries connecting to it and then eventually times out, with a cannot connect to Citrix server error.

Is there another port that needs to be open ? or am I missing something else ?

Thanks in anticipation !

Andy.

(in reply to andyhd)

Post #: 3

RE: Citrix NFuse Xp1.0 - 6.Nov.2002 9:32:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Andy,

no, that should be all what must be done on ISA. You can test the ICA connection from the outside by using the command 'telnet <ISA external interface IP> 1494'. If the ICA server publishing rule is working, the connection should succeed and you should get a response like ICA...ICA...ICA.

However, because the Metaframe server sits behind ISA and the ISA is doing NAT, you must do some special configuration on NFuse or the Citrix server. I don't remember it from the top of my head, but it is something with an alternate address command on Metaframe or an alternate address configuration setting in the ICA template file on NFuse. There you should specify the ISA external IP address used in the ICA server publishing rule. Your Citrix administrator should know this by heart! [Big Grin]

HTH,
Stefaan

(in reply to andyhd)

Post #: 4

RE: Citrix NFuse Xp1.0 - 11.Nov.2002 11:43:00 AM

andyhd

Posts: 29
Joined: 25.Mar.2002
From: Worcestershire
Status: offline

Hi,
Thanks for the reply again.

I have allocated an external address used for the isa server on the citrix server, and I can telnet to 1494 on the external ip address of the isa server, with an "ICA","ICA" response.

When I use the client to connect through the isa server to the citrix server I still cannot see the applications.(scratches head)

The error is "Cannot connect to Citrix server.

I am specifying the external address in "Application set settings" for the client and selecting "Use alternate address for firewall connection".

If anyone has been through this pain before, I would welcome a reply.

Many Thanks.

Andy.

(in reply to andyhd)

Post #: 5

RE: Citrix NFuse Xp1.0 - 11.Nov.2002 12:25:00 PM

koni999

Posts: 40
Joined: 16.Aug.2001
From: Netherlands
Status: offline

tested without isa?

xml service installed and running on mf server?

web site wizard used to create webpage?

gr. Rogier

(in reply to andyhd)

Post #: 6

RE: Citrix NFuse Xp1.0 - 11.Nov.2002 1:16:00 PM

andyhd

Posts: 29
Joined: 25.Mar.2002
From: Worcestershire
Status: offline

Hi,
Yes this is a working server on our network, and it runs XP & Nfuse internally fine.

The xml service is currently installed on port 80 along with the IIS service.

Although accessing nfuse from the external client works so far as seeing the applications , so I presume it's not a webpage problem. It's when executing the applications from the client that causes the "Cannot connect to the Citrix Server" error.

Is it authenication problem, or am I missing a publishing step somewhere?

Do I have to change the template.ica file on the server at all ?

Andy.

(in reply to andyhd)

Post #: 7

RE: Citrix NFuse Xp1.0 - 11.Nov.2002 2:05:00 PM

koni999

Posts: 40
Joined: 16.Aug.2001
From: Netherlands
Status: offline

that alternate address that spouseele was talking about is most likely the thing..

don't know if you tried altaddr

here's some info,

search for the docs here:
http://hqextsrvsft01.citrix.com

CTX584485

CTX744092

and some more...

http://thethin.net/faqs2.cfm?id=123&category=3&sortby=date

gr Rogier

(in reply to andyhd)

Post #: 8

RE: Citrix NFuse Xp1.0 - 11.Nov.2002 4:21:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Andy,

I have yet no first hand experience with configuring NFuse, CSG and Metaframe XP myself, but I do know how this things should work! [Big Grin]

When going through NFuse, the user must first login to NFuse. On succesfull login, NFuse will give the user a page with application icons to which he is allowed access. Now, when the user clicks an application icon, NFuse will construct a file '.ica' and send it to the browser. On the workstation the ica extension is linked to the ica client application. So, the ica client will startup and use the downloaded file '.ica' as parameter file.

Now, it must be clear that the connection parameters in this ica file must point to the ISA external IP or FQDN where you have server published the Metaframe XP server on. Because the Metaframe XP server publishing seems to work already, I suggest you *save* the ica file on the workstation and check out what are the connection parameters sent.

For more info how to configure NFuse and Metaframe XP in a NATted environment, consult the Citrix administrator guides. As far as I remember this topic is very well explained in there. [Razz]

HTH,
Stefaan

(in reply to andyhd)

Post #: 9

RE: Citrix NFuse Xp1.0 - 13.Nov.2002 2:01:00 PM

andyhd

Posts: 29
Joined: 25.Mar.2002
From: Worcestershire
Status: offline

Hi everyone, many thanks for all replys.

I thought I had this one tied up. In the end I modified the template.ica file on the Citrix server from the citrix knowledge base link..CTX584485.

I quote...

--------------------------------------------

5. The last step is to modify the Template.ica file in the NFuse Web site. Be sure to edit the correct Template.ica file (by default, there is one for each NFuse Web site). Open this file in a text editor and locate this line:

Address=[NFuse_IPV4Address]

Modify this line so that it reads:

Address=[NFuse_IPV4AddressAlternate]

NFuse will now work properly in a NAT environment.
------------------------------------------

I thought my god it works. I was over joyed to say the least. Then some kind soul pointed out from the internal network, the following error appeared when connecting to and application.

"Cannot connect to the Citrix server:

There is no route to the specfied subnet Address"

Grrrr, so now I can only get external people connecting and not internal.

I realise this is turning into a Citrix problem, and forgive me for posting this again on here. If anyone knows why it's doing this I would be very grateful.

Regards

Andy.

(in reply to andyhd)

Post #: 10

RE: Citrix NFuse Xp1.0 - 14.Nov.2002 12:53:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Andy,

yep, it is definitely a Citrix configuration problem! [Razz]

In my previous post I explained how NFuse passes the connection parameters to the ICA client. Now, if internal users are trying to access Metaframe through NFuse, they will also get as connection parameters the alternate address. The problem is now that an internal client can't loop through ISA. So you have to modify the NFuse configuration.

I'm sure it is possible but if I remember well, the type of solution depends on the version of NFuse, and maybe you need the Columbia extensions for older NFuse versions. I vaguely remember you could specify an IP address range for which the alternate address should not be used. That IP address range should be your ISA LAT.

BTW --- for more info, read the Citrix administrator guides, search the Citrix web and/or consult specific Citrix forums.

HTH,
Stefaan

(in reply to andyhd)

Post #: 11