Transcription

1 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 1 / 11 Knowledge Center Communities Sup Alerts Sign in How to Configure XenDesktop behind Network Address Translation Document ID: CTX / Created On: / Updated On: Average Rating: View products this document applies to Summary XenDesktop returns the internal IP address of the Virtual Desktop behind Network Address Translation (NAT) to the Deskto network. Therefore, the client s connection fails to establish a session to the Virtual Desktop. XenDesktop uses the configured Domain Name Service (DNS) entry on the internal network to return the IP address of the Follow steps 1-4 in the network diagram bellow. Note: All scenarios in this guide relate to this network diagram. Requirements XenDesktop 2.0 Access Management Console installed XenDesktop 2.0 CD

2 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 2 / 11 Procedure 1. Open Citrix Management Console on the XenDesktop Server. 2. Check if Web Interface component is installed. a. Right-click Citrix Resources and select Configure and run discovery. b. Check if Web Interface component is installed.

3 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 3 / 11 c. Cancel the wizard. (If this is your first start, then you can continue and finish the wizard.) Note: Add/Remove programs can also show you if the Web Interface component was installed. 3. Install the Web Interface component if it is missing. a. Close Citrix Access Management Console. b. Install Web Interface component from Citrix XenDesktop 2.0 CD by running ASC_WebInterface.msi file which can be fo Console\Setup\ directory. Otherwise search for the file. 4. Open the Citrix Access Management Console. You can check again that the Web Interface component is installed by fol under Configuration Tools.

4 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 4 / Now you can edit the default Internal Site or create a new site (you can later switch between many different sites which y a. To edit the default site continue with step 6. b. To create a new site, right-click Web Interface and select Create Site. i. Select XenApp Web. ii. Type any path you want or leave the default value. /Citrix/External /Citrix/DesktopWeb02 /Citrix/Anything iii. Set the site as the default page for the Internet Information Services (IIS) site (you can do this later.)

5 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 5 / 11 iv. Specify where the user authenticates. Select At Web Interface (default)

6 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 6 / 11 v. Review the site settings. vi. Finish the wizard. You can start the configuration of the new site, however this procedure leaves it as the default and d apply). Clear the check box for Configure this site now and click on Finish. (Note: You can later configure the site as you wish. You can compare the defaults in Internal Site settings with the new site c. To delete a site, right-click on the particular site and navigate to Uninstall Site.

7 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 7 / 11 d. To make a site the Default Site, click on the particular site and navigate to Manage IIS hosting, then select Set as the d between many site configurations which you can create.)

8 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 8 / 11 Note: You may notice that each site has its own path. You can create many sites with many different settings and then adv full path for the Internet browser would be Scenario:

9 CTX How to Configure XenDesktop behind Network Address Translation -... 페이지 9 / 11 Handling multiple site configuration becomes very helpful in scenarios where you would like to use Virtual Desktops for clie connecting from behind NAT (public network). Also, you can separate XenDesktop groups, apply different policies and sett For example: You can use the default Internal Site (without configuration for NAT) for clients connecting from internal network. You m is /Citrix/DesktopWeb. The full path which you type in your browser would be the internal network. On the other side, the newly created site with path /Citrix/DesktopWeb02 will be used for clients connecting from behin (in step 6) clients on internal network will not be able connect through this site/path. You will advertize this path clients behind NAT. In summary, you will use two sites; one for clients on internal network and one for clients behind NAT. You may advertize those links, for example, through any website where the users will click only to connect to the correct pa For example: Remote users Click Here ( Local users Click Here ( Which site to use as the default depends on you. If you decide to make the Internal Site as the default, then the clients can Others must use the full path. 6. Configure the site for NAT translation. a. Right-click on the new website created and select Secure Client Access >>> Edit Secure Client Access. b. Edit the default entry and change the Access Method to Translated. Confirm everything and click Next. c. Specify Address Translation for each XenDesktop Agent.

10 CTX How to Configure XenDesktop behind Network Address Translatio... 페이지 10 / 11 Internal IP address - the address of every XenDesktop Agent (Virtual Desktop). In the network diagram above, Internal IP which has XenDesktop agent installed. Internal port the port number that the XenDesktop agent listens to. The Internal port can be same with every Virtual Des External Address the external IP address of the gateway where NAT is configured. For example: This can be the public Provider (ISP). External port the External port which is the port forwarded on your firewall. Scenario: Address Translation Say that you have three Virtual desktops as shown on the network diagram above. Then you must specify Address Transla In this scenario you would add the following entries: Firewall/Router/NAT You also must configure port forwarding three times on the firewall/router/nat. Here is an example with IPTABLES:

11 CTX How to Configure XenDesktop behind Network Address Translatio... 페이지 11 / 11 # iptables t nat A PREROUTING I eth0 p tcp - -dport 1491 j DNAT - -to-destination :1494 # iptables t nat A PREROUTING I eth0 p tcp - -dport 1492 j DNAT - -to-destination :1494 # iptables t nat A PREROUTING I eth0 p tcp - -dport 1493 j DNAT - -to-destination :1494 Also, you must configure port forwarding for http to access the XenDesktop Server Web Interface. Port 80 to port 80 on IIS # iptables t nat A PREROUTING I eth0 p tcp - -dport 80 j DNAT - -to-destination :80 You may notice that the port number is always different on an External interface (coming from the public IP source port). XenDesktop Agent is listening on the same port on each computer. IP configuration on Virtual Desktops Regarding internal IP addresses on Virtual Desktops, you should configure DHCP Server to reserve IP address for each do not want the IP address tol change on Virtual Desktops because you have static rules configured on the firewall. 7. Establishing connection You should be able to establish the connection from your client s Internet browser: ( in our scenario) (Make sure that the new site is the default, otherwise, you must use the full path.) This document applies to: XenDesktop 2.0 x32