WANScaler Client System Guide 070907

Embed Size (px)

Citation preview

  • 7/31/2019 WANScaler Client System Guide 070907

    1/54

    Citrix WANScaler Client System

    Adm in i st r a to r s Gu ide

    Release 4.2

    Contains complete documentation for the WANScaler Client and WANScalerController.

    For the WANScaler Appliance, you also need the WANScaler Appliance I nstallationand Users Guide, release 4.2.

    Ci t r i x System s, I nc .

  • 7/31/2019 WANScaler Client System Guide 070907

    2/54

    Copyright 2007 by Citrix Systems, Inc. All rights reserved.

    Citrix, Citrix Systems, WANScaler, Orbital Data, TotalTransport,AutoOptimizer Engine, and Adaptive Rate Control are trademarks of Citrix

    Systems, Inc.

    Citrix Systems assumes no responsibility for errors in this document, and

    retains the right to make changes at any time, without notice.

    Portions licensed under the Apache License, Version 2.0http://www.apache.org/licenses/LICENSE-2.0.

    Portions licensed under the Gnu Public License, http://www.gnu.org/copyleft/gpl.html,including xmlrpc++, glibc, rpm-libs, beecrypt.

    Portions licensed under the Gnu Public License with product-specific clauses, including theLinux kernel (http://www.kernel.org/pub/linux/kernel/COPYING), libstdc++, and libgcc.

    Portions are free software with vendor-specific licensing, including zlib(http://www.gzip.org/zlib/zlib_license.html), net-snmp (http://www.net-

    snmp.org/about/license.html), openssl (http://www.openssl.org/source/license.html), krb5-libs (http://web.mit.edu/kerberos/krb5-1.3/krb5-1.3.6/doc/krb5-install.html), tcp_wrappers(ftp://ftp.porcupine.org/pub/security/tcp_wrappers_license), bzip2-libs(http://sources.redhat.com/bzip2/), popt (http://directory.fsf.org/libs/COPYING.DOC).

    Elfutils-libelf is licensed under the OSL 1.0 license, http://www.opensource.org.

    JPGraph licensed under the terms given in https://reader009.{domain}/reader009/html5/0430/5ae5fb5226

    LZS licensed from Hifn corporation, http://www.hifn.com.

    Iperf licensed under the terms given in http://dast.nlanr.net/Projects/Iperf/ui_license.html.

    This product includes PHP, freely available from http://www.php.net/.

    DNE is licensed from Deterministic Networks, http://www.deterministicnetworks.com

    CTX112194

    http://www.deterministicnetworks.com/http://www.deterministicnetworks.com/
  • 7/31/2019 WANScaler Client System Guide 070907

    3/54

    Conten ts

    1. Introduction.....................................................................................51.1. Who Should Read This Guide ........................................................51.2. About the WANScaler Client Solution .............................................5

    1.2.1. Acceleration Features....................................................................... 61.2.2. Supported Clients............................................................................ 61.2.3. Basic Operation............................................................................... 7

    1.2.4. Detailed Description of Redirector Mode.............................................. 81.2.5. Detailed Description of AG-Inline Mode ..............................................10

    2. Deployment ...................................................................................132.1. Limitations of This Release .........................................................13

    2.1.1. Appliances are Used For Local Connections.........................................132.1.2. Windows Ethernet Bridging is Not Supported on Client Systems ............132.1.3. Many SSL-Based VPNs Will Not Work.................................................13

    2.2. Deploying WANScaler Appliances.................................................132.2.1. Put the WANScaler Appliances in a Secure Part of your Network............132.2.2. Port Usage ....................................................................................132.2.3. TCP Option Usage and Firewalls........................................................142.2.4. Compatibility Issue with Pre-Release-4.x Appliances............................14

    2.3. Deploying to Support Virtual Private Network (VPN) Units...............142.3.1. Configuring VPN Units for WANScaler Acceleration...............................16

    2.4. Deploying WANScaler Controllers ................................................162.5. Deploying Clients ......................................................................17

    2.5.1. Customizing the Client MSI File ........................................................173. Installation ....................................................................................20

    3.1. Product Contents ......................................................................203.2. Initial Planning .........................................................................20

    3.2.1. Appliance Deployment is Critical .......................................................203.2.2. Controller Placement is Important.....................................................203.2.3. Client Deployment is Easy ...............................................................20

    3.3. Appliance Pre-Installation...........................................................213.4. Controller Pre-Installation ..........................................................213.5. Appliance Installation ................................................................213.6. Controller Installation ................................................................22

    3.6.1. Install the WANScaler Controller Into the Rack ...................................223.6.2. Install Ethernet Cables....................................................................233.6.3. Perform Initial Configuration Via the Front Panel .................................233.6.4. WANScaler Controller Browser-Based Configuration.............................243.6.5. Security: Change the Admin Password...............................................263.6.6. Define Accelerated Subnets .............................................................26

    3.7. Install WANScaler Clients ...........................................................283.7.1. Customizing the WANScaler Client Software .......................................283.7.2. Downloading..................................................................................283.7.3. Installation Troubleshooting.............................................................303.7.4. Running the Client For the First Time ................................................31

    3.8. Testing the Installation ..............................................................323.9. Troubleshooting Appliances ........................................................33

    3.9.1. Cabling and Duplexing Problems.......................................................333.9.2. Transfers are Not Accelerated ..........................................................33

    3.10. Troubleshooting Clients ............................................................333.11. Troubleshooting WANScaler Controllers ......................................34

  • 7/31/2019 WANScaler Client System Guide 070907

    4/54

  • 7/31/2019 WANScaler Client System Guide 070907

    5/54

  • 7/31/2019 WANScaler Client System Guide 070907

    6/54

    WANScaler accelerates communication between clients and servers:

    On the client side, the WANScaler Client is a software-based network accelera-tor that runs on end-users computers.

    On the server side, the WANScaler Applianceis a rack-mount unit that acceler-ates the traffic from any number of servers. The WANScaler 8300 Series, 8500

    Series, and 8800 Series currently support WANScaler Client deployments.

    A second rack-mount unit, the WANScaler Controller, provides secure, centralized

    management for the entire WANScaler installation. It can exist anywhere on thenetwork.

    1.2 .1 . Acce lera t ion Featu res

    Acceleration is achieved primarily through these features:

    Persistent, disk-based compression. Ordinary compression has no long-termmemory; it cannot find repeated data patterns that happened more than a few

    kilobytes in the past. WANScaler compression spans gigabytesof past traffic, al-

    lowing better compression (and far higher throughput) than be achieved withconventional methods. Under moderately favorable conditions, LAN data rates

    can be achieved over DSL and even dial-up connections. Compression ratios canrun as high as 10,000:1.

    Transport acceleration, giving superior performance on congested, high-latencylinks.

    CIFS acceleration, providing vastly improved performance when using Windowsfile servers and other servers following the CIFS (Common Internet File System)standard.

    These optimizations build upon one another. For example, CIFS transfers undergonot only CIFS acceleration, but transport acceleration and disk-based compression as

    well.

    1.2 .2 . Supp or t ed Cl ien t s

    The WANScaler Client is supported on the following operating systems:

    Windows 2000 Professional Windows XP Home Windows XP Professional

    Recommended hardware requirements are:

    Pentium 4-class CPU 1 GB of RAM 2 GB of free disk space

    Minimum hardware requirements are:

    1.0 GHz CPU 512 MB RAM 350 MB free disk space

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 6 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    7/54

    1.2 .3 . Bas ic Operat ion

    WANScaler uses your existing WAN/VPN infrastructure. Client systems continue to

    access the LAN, WAN, and Internet as they always have. No changes are required toVPN software, routing tables, network settings, client applications, or server applica-

    tions.

    Accelerated connections are passed from the WANScaler Client to the WANScalerappliance, which in turn passes them to the server. In other words, the WANScaler

    appliance acts as a proxy. Acceleration information between the WANScaler Clientand appliance uses TCP option headers, and doesnt require a control connection.

    The WANScaler Controller manages groups of appliances and clients, informing the

    client of the location of appliances and which subnets they accelerate. The clientcontacts the WANScaler Controller to get this information. This control flow is shown

    in Figure 2.

    Figure 2. WANScaler control flow.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 7 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    8/54

    Red i rec to r Mode v s . AG- I n l i ne Mode . There are two variations on the way con-

    nections are handled by the Client and Appliance: redirector m odeand AG-Inlinemode.

    Red i rec to r m ode is always used unless the Appliance is accessed via a CitrixAccess Gateway VPN. Redirector mode uses an explicit proxy. The Client re-

    addresses outgoing packets to the Appliances redirector IP address. The Appli-ance in turn re-addresses the packets to the server, while changing the return

    address to point to itself rather than the Client. In this mode, the Appliancedoes not have to be physically inline with the path between the WAN interface

    and the server (though this is the recommended deployment mode).

    AG- I n l i n e mo d e is always used when the Appliance is accessed via a CitrixAccess Gateway VPN. Currently supported Access Gateway devices are the Ac-

    cess Gateway Standard Edition, release 4.5.6 and later, and the Access Gate-way Advanced Edition, release 4.5 Hotfix 1 and later. AG-Inline mode does not

    alter addresses at all. The Appliance must be inline with the path between theWAN interface and the server. In AG-inline mode, the Appliance is a transpar-

    ent, intercepting proxy.

    1 .2 .4 . Deta i led Descr ip t ion o f Red i rec to r Mode

    Figure 6 shows the packet flow and address mapping in redirector m odeused byWANScaler system. Redirector mode is a proxy mode that is transparent to applica-

    tions on the client:

    The client application thinks it is talking directly to the server. For this reason,applications do not need to be reconfigured. (Redirector mode is thus an inter-cepting proxyat the Client end of the connection.)

    The WANScaler Client software redirects the packets to the appliance. The appliance performs its optimizations, then redirects the output packets to

    the server, giving itself as the source of the packets. Thus, from the servers

    point of view, the connection originates at the appliance.

    Return traffic from the server is addressed to the Appliance, which performsoptimizations in the return direction and forwards the output packets to the Cli-ent.

    The port numbers are not changed, so network monitoring applications can stillclassify the traffic.

    Redirector mode behaves somewhat differently from appliance-to-appliance mode.

    Appliance-to-appliance mode is an auto-discovering mode that does not use theWANScaler controller or address rewriting. However, a WANScaler appliance can use

    both methods at once: redirector mode to talk to clients, and appliance-to-appliance

    mode otherwise.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 8 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    9/54

    WANScaler Client10.0.0.50

    WANScaler Appliance10.200.0.201

    Server10.200.0.10

    1 2

    3

    4

    5

    6

    The connection is now fully open. The Client and server sendpackets back and forth via the appliance.

    While the addresses are altered in Redirector mode, the portnumbers are not, nor is the data encapsulated. Redirectormode is a proxy, not a tunnel.

    There is no 1:1 relationship between packets (though in theend, the data received is always identical to the data sent).Compression may reduce many input packets into a singleoutput packet. CIFS acceleration will perform speculativeread-ahead and write-behind operations. Also, if packets aredropped between appliance and Client, the retransmission ishandled by the appliance, not the server, using advanced

    recovery algorithms.

    6

    The user's application opens a TCPconnection to the server, sending aTCP SYN packet.

    Src: 10.0.0.50, Dst: 10.200.0.10

    The WANScaler Client looks up thedst address and decides to redirect

    the connection to the appliance at10.200.0.201.

    Src: 10.0.0.50, Dst: 10.200.0.201

    (10.200.0.10 is preserved in a TCPoption field. Options 24-31 are usedfor various parameters.)

    The appliance accepts theconnection and forwards the packetto the server (using the dst addressfrom the TCP options field), andgiving itself as the src.

    Src: 10.200.0.201, Dst: 10.200.0.10

    The server accepts the connection

    and responds with a TCP SYN-ACKpacket.

    Src: 10.200.0.10, Dst: 10.200.0.201

    The appliance rewrites the addressesand forwards the packet to theClient (placing the server address inan option field).

    Src: 10.200.0.201, Dst: 10.0.0.50

    1

    2

    3

    4

    5

    Figure 3. WANScaler packet flow, showing the address changes used by Redirector modeproxying.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 9 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    10/54

    Figure 4. Redirector-mode acceleration takes place between the Client and the appliance closestto the server, ignoring other appliances encountered along the way. The target appliance isselected by the client rules downloaded from the WANScaler Controller.

    1 .2 .5 . Deta i led Descr ip t ion o f AG- I n l i ne Mode

    When using the Citrix AG-SE or AG-AE (Access Gateway Standard/Advanced Edition)

    VPN, the Client automatically uses AG-Inline mode instead of Redirector mode

    (redirector mode is used in all other cases.) AG-Inline mode acts more like appli-ance-to-appliance acceleration. The WANScaler appliance is placed inline with the AG

    unit, and the Client sends all its AG-bound traffic using appliance-style inline mode,

    without changing the packet address to that of the appliance. Thus, when using theAccess Gateway VPN, the servers addressee the address used by the VPN, not that

    of the WANScaler appliance.

    AG-Inline mode provides acceleration for connections terminating on the site with

    the Access Gateway VPN unit. Connections that continue on to other sites are accel-

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 10 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    11/54

  • 7/31/2019 WANScaler Client System Guide 070907

    12/54

    Figure 6. WANScaler packet flow, showing the address changes used by Redirector modeproxying.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 12 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    13/54

    2 . Dep loym en t

    2.1 . Lim i t a t io ns o f Th is Re lease

    2.1 .1 . App l ian ces are Used For Loca l Conn ect ions

    If the WANScaler Client is on the same LAN as the server, it would be faster if it wentdirect instead of using the WANScaler appliance. In this release, this case is not

    detected.

    W o rka ro u n d . Disable the WANScaler Client when you bring your PC to an appli-

    ance-equipped site.

    2 .1 .2 . Win dow s Eth erne t B r idg in g i s No t Suppor ted on Cl ien tSys tems

    Microsoft Windows allows two Ethernet ports to be bridged. This is not supported onClient systems. If this feature is enabled, acceleration will stop working.

    2.1 .3 . Many SSL-Based VPNs Wi l l Not W ork

    Most SSL-based virtual private networks do not support acceleration. The latestreleases of Citrix Access Gateway Standard Edition and Access Gateway Advanced

    Edition support WANScaler Client acceleration.

    2.2 . Dep loy ing W ANScaler App l iances

    A WANScaler appliance should be deployed on the same site as the servers it sup-

    ports. A high-speed link between appliance and server is essential to good perform-ance. A gigabit Ethernet link is ideal.

    Appliances can use any of the deployment modes described in the WANScaler Appli-ance Installation and Users Guide, r elease 4.2 . These modes are suitable for both

    appliance-to-appliance and client-to-appliance acceleration.

    2.2 .1 . Put t he W ANScaler App l iances in a Secure Par t o f you rN e t w o r k

    The appliance is not a security device and depends on your existing security infra-

    structure in the same way that your servers do. It should be placed on the same sideof the firewall (and VPN unit, if used) as the servers.

    2.2 .2 . Por t Usage

    Por ts used fo r com m un ica t ion w i th W ANSca ler Con t r o l l e rs .

    A single port is used for the control channel when clients and appliances contact theWANScaler Controller. By default, this is port 443 (https), which is allowed through

    most firewalls.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 13 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    14/54

    If necessary, it can be configured to any value. However, all appliances and clients

    must also be configured to use this new port.

    Por ts used fo r comm un ica t ion w i th W ANSca ler Cl ien ts . A signaling port is usedfor signaling connections between the Client and the appliance. By default, this is

    port 2312. However, this port is blocked by many firewalls. We recommend that you

    change the setting to port 443 (https), which is allowed through most firewalls.

    Note : If you use port 443 for the signaling connection, you cant use port HTTPS on

    port 443 to manage the appliance. The appliance defaults to HTTP management onport 80. If you wish to use HTTPS to manage the appliance, you must use a port

    other than 443 (such as 9000).

    Po r t s u se d f o r co mm u n i cat i o n w i t h se rve rs . Communication between theWANScaler Clients and the WANScaler appliances uses the original ports. That is,

    when a client opens an HTTP connection on port 80, it connects to the appliance onport 80. The appliance in turn contacts the server on port 80.

    The appliance assumes that it will be able to communicate with the server on any

    port requested by the client, and the client assumes that it can communicate withthe appliance on any desired port. Exceptions to this rule can be created in the

    WANScaler Controller, but this is usually not necessary if the appliance is installed sothat it is subject to the same firewall rules as the servers. When this is done, anyconnection that would succeed in a direct connection will succeed in an accelerated

    connection.

    2.2 .3 . TCP Opt ion Usage and Fi rew al ls

    WANScaler acceleration parameters are sent via TCP options. These may occur in

    any packet, and are guaranteed to be present in the SYN and SYN-ACK packets thatestablish the connection.

    Your firewall must not block TCP options in the range of 24-31 (decimal), or accel-

    eration cannot take place, and accelerated connections will be blocked. Most firewalls

    do not block these options. However, Cisco PIX and ASA firewalls with release 7.xfirmware may do so by default.

    See the WANScaler Appliance Installation and Users Guidefor more information.

    2 .2 .4 . Com pat ib i l i t y I ssue w i th Pre -Release-4 .x App l iances

    The presence of another WANScaler appliance between the target appliance and the

    WANScaler Client will prevent the connection from opening if it is running release 3.xor below.

    W o rka ro u n d : Upgrade the offending appliance to release 4.x.

    2 .3 . Dep loy ing t o Suppo r t V ir t ua l Pr i va te Ne tw o rk( VPN) Un i t s

    The WANScaler Client system is often used in conjunction with a virtual privatenetwork (VPN). Typically, the VPN consists of a software-based agent on the Client

    system and an appliance in the datacenter, thus being structured much like theWANScaler Client system.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 14 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    15/54

    VPN hardware must be deployed in a way that allows the WANScaler appliance to do

    its job. In general, this means that the WANScaler appliance should be cabled

    directly to the LAN-side Ethernet port of the VPN unit. If the VPN unit has only oneEthernet port, the WANScaler appliance should be cabled directly to this, ensuring

    that the LAN-side VPN traffic must pass through the WANScaler appliance to reachthe datacenters server.

    See Section 2.3 in the WANScaler Appliance I nstallation and Users Guide, r elease

    4.2.

    Figure 7. Appliance deployment options for one-armed VPNs.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 15 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    16/54

    Firewall

    WANScalerAppliance

    Servers

    OtherUsers

    InlineVPN Router

    Figure 8. Appliance deployment for two-armed VPNs.

    2.3 .1 . Conf igur ing VPN Uni t s fo r W ANScaler Acce lera t ion

    Most IPSec and PPTP VPN units will work with the WANScaler Client system without

    special configuration.

    The Citrix Access Gateway Standard Edition and Access Gateway Advanced Edition

    require some WANScaler-specific configuration, and must also be running the latest

    software. See Section 2.3.1 of the WANScaler Appliance Installation and UsersGuide, release 4.2.

    2.4 . Dep loy in g WANScaler Cont ro l le r s

    The WANScaler Controller configures, authenticates, monitors, and controls clients,

    and authenticates and monitors appliances.

    A WANScaler client network supports a single WANScaler Controller. The WANScalerController must be accessible by all clients and appliances. If some of the clients are

    installed on mobile users systems, these clients may be anywhere in the world.

    The WANScaler Controller does not make outgoing connections to clients or appli-ances; the clients and appliances connect to the Controller.

    The WANScaler Controller should thus be placed in a globally accessible location,

    such as on a static IP address on the public Internet or on a VPN address for whichall client users will have access.

    Cont r o l po r t usage . The WANScaler Controller uses a single port (by default, port443), to control clients and appliances. Clients and appliances need to be able to

    reach the WANScaler Controller at this port. Firewalls generally leave this port open,

    because it is a standard secure communications port used (for example) by HTTPS.Console por t usage. The browser-based interface on the WANScaler Controller

    uses HTTP on port 80 for web-based administrative access. Alternatively, this can beset to HTTPS (port 443). Your firewall should allow administrative access to the

    WANScaler Controller.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 16 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    17/54

  • 7/31/2019 WANScaler Client System Guide 070907

    18/54

  • 7/31/2019 WANScaler Client System Guide 070907

    19/54

    Note : Some users have seen a bug in orca that causes it to truncate files to 1 MB.

    Check the size of the saved file. If it has been truncated, make a copy of the original

    file and use the Save command to overwrite the original.

    Your Client software has now been customized.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 19 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    20/54

    3 . I ns ta l l at i on

    The procedures in this section will get your units up and running.

    3 .1 . Produ c t Con t en ts

    A WANScaler solutions contains the following:

    At least one WANScaler Applian ce, an acceleration appliance that providesaccelerated, secure connections for an office or datacenter. Any number of

    WANScaler appliances can be installed in parallel to form appliance clusters,providing higher performance and fault-tolerance.

    At least one WANScaler Client , a software-based acceleration package for desk-top and notebook PCs, providing accelerated, secure connections with WANSca-ler appliance-equipped sites.

    At least one WANScaler Controller, a 1U rack-mount unit. This unit manages therest of the installation, providing centralized control and ensuring security. Asingle WANScaler Controller can manage any number of WANScaler appliances

    and WANScaler Clients.

    The initial installation stages for the WANScaler Controller and WANScaler applianceare almost identical. Follow steps 0-15 for each unit in your installation.

    The installation procedures for the two unit types diverge once the Web-based

    management interface is started. Find the instructions for the type of unit you areinstalling (appliance or WANScaler Controller) after steps 0-15.

    3 .2 . I n i t i a l Plann ing

    3.2 .1 . App l iance Deploym ent is Cr i t i ca l

    The most complicated part of the installation is the deployment of your appliances.

    Please read the WANScaler Appliance Installation and Users Guide, Chapters 1-3,before you decide on a permanent deployment.

    3 .2 .2 . Con t ro l l e r Placem ent i s I m por t an t

    The WANScaler Controller must be accessible to all your client users. If you use

    multiple VPNs or generally restrict access to part of your internal network, be sureyour WANScaler Controller is deployed where all users can reach it.

    3.2 .3 . Cl ien t Dep loym ent is Easy

    Because the WANScaler Client is intended for users anywhere in the world, itsdeployment provides few barriers.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 20 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    21/54

  • 7/31/2019 WANScaler Client System Guide 070907

    22/54

    Figure 9. Setting WANScaler addresses.

    3 .6 . Con t ro l l e r I ns ta l l a t ion

    3 .6 .1 . I ns ta l l th e WANScale r Con t ro l l e r I n t o th e Rack

    1. Install the WANScaler Controller into the rack. Power the unit up.

    W ANSca le r Cont ro l le r

    PowerUsePort1

    Only Figure 10. WANScaler Controller connectors.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 22 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    23/54

    3 .6 .2 . I ns ta l l Eth e rne t Cab les

    UseExisting

    Cabling

    Figure 11. WANScaler Controller cabling.

    2 Install the Ethernet cable. The WANScaler Controller uses motherboard port1, a 1000/100/10 mbps Ethernet port. Because the port auto-senses the

    Ethernet port and cable type that it is attached to, you can use any appro-

    priate high-quality cable to connect the Controller to your switch. Use theprovided blue straight-through cable if convenient.

    3 .6 .3 . Per fo rm I n i t i a l Con f igu r a t ion V ia the Fron t Pane lThe front-panel interface has a two-line LCD display and five buttons. These allow

    the IP address, netmask, and gateway to be set. Further configuration is donethrough the browser-based management interface.

    3. If necessary, wait (up to several minutes) for the front-panel display to

    change from its default WANScaler Controller display. It will begin display-

    ing parameters one after the other.

    Press the middle button for data-entry mode, and set the IP address (from

    Step 6), netmask, and gateway address through the front-panel interface as

    shown:

    3a.WANScaler Controller Default display during system startup

    The five buttons are shown on the right.

    3bVersion

    1.02 Build 107

    Once the system is initialized, the displaycycles through the current parametersettings. Press the middle button for data-entry mode

    3c.Host Name

    localhost.local

    Pressing the down button displays thehostname. This cannot be set from the frontpanel.

    3d.VLAN ID

    Off 1234

    Skip the VLAN section by pressing the downbutton again.

    3e.IP Address

    0.0.0.0

    Pressing the down button again displays theIP address.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 23 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    24/54

    3f.IP Address

    000.000.000.000

    Pressing the middle button allows you toedit the IP address. The left and rightbuttons move the cursor. The up and downbuttons increment and decrement the IPaddress. Pressing the middle button savesthe address.

    3g. Save? Yes/No172.16.0.110

    Finally, press the center button to submitthe IP address and press it again to verifythat you wish to keep it.

    3h.Netmask

    255.255.255.255

    Pressing the down button once moredisplays the netmask. Press the middlebutton to edit the netmask. The up anddown buttons will cycle the netmask throughthe allowed values.

    3i.Gateway

    0.0.0.0

    Pressing the down button displays thegateway address. Edit as with the IPaddress.

    3j.Service Port

    443

    The Controller communicates with theAppliances on Port 443 by default, but youcan change this if absolutely necessary.

    3k.Restart?

    Pressing the down button displays therestart screen. Changes do not take eff ectunti l you restart. Press the middle button torestart.

    3l.WANScaler Controller

    System Version

    If you do not restart, pressing the downbutton will show a scrolling marquee givingthe release and build numbers of thesoftware.

    3 .6 .4 . WANSca le r Con t ro l l e r B row ser -Based Con f igu r a t ion

    4. Using a Web browser, go to the WANScaler Controllers management page

    with the URL: http://xx.xx.xx.xx, where xx.xx.xx.xx is the management IPaddress you assigned in Step 6. You will be prompted for a username and

    password. The factory default values are Admin and wanscaler. (You willchange the Admin password later on.)

    If you dont get the login prompt, check the Controllers IP and gateway

    addresses via the LCD front panel, and check your cabling.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 24 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    25/54

    Figure 12. WANScaler Controller login page.

    5. Once logged in, you will see the main page. Check to make sure that thereis a non-zero number on the Appliances Connected line, as shown in

    Figure 13. If not, there is a connectivity problem.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 25 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    26/54

    Figure 13. WANScaler Controller main page.

    3 .6 .5 . Secur i t y : Change t he Adm in Passw ord

    6. For security, the Admin password should be changed from its default value.Click the User Accounts link at the top of the page. Delete the text in the

    Password field for the Admin account and type in a new password:_____________. Click the Update button.

    3.6 .6 . Def ine Acce lera ted Subnet s

    The following procedure will walk you through the creation of a simple WANScaler

    network definition on the WANScaler Controller.

    The client rules tell the clients which appliances to send their traffic to. Each rule

    specifies:

    1. An appliance.2. A subnet or port range that the appliance can accelerate.App l iance De tect ion . New appliances are detected automatically if the administra-

    tor configures the WANScaler Controller IP address on the appliances WANScalerpage or on the LCD front panel. However, no rules for appliance/server/client map-

    ping are generated automatically. You cannot add rules for an appliance until the

    WANScaler controller has detected it.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 26 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    27/54

    Cl ient Detect ion. When a client connects to the WANScaler Controller (which it will

    do automatically), it downloads the rules. The status of each client is tracked by the

    WANScaler controller. The clients are tracked by name, using the same networkname they announce to the Windows network.

    What to Accele ra te . Acceleration is most effective when the appliance is close to

    the server. Acceleration can be harmful if the client forwards traffic to an appliancethat is distant from the server, especially if this triangle route introduces a slow or

    unreliable link. Thus, we recommend that Client rules be configured to to allow agiven appliance to accelerate its own site only. This task is performed on the Client

    Rules page.

    Rules are evaluated in order, and the action (Accelerate or Exclude) from the firstmatching rule is taken. For a connection to be accelerated, it must match an Accel-

    erate rule. Otherwise, the connection is made directly with the target server.

    Figure 14. Editing the client group. This is where client-appliance-server mapping is per-formed.

    3. On the Client Rules page,

    Double-check that Softboost is selected. On the Accelerated Subnets/IP Addresses section: Add an Accelerated rule for each subnet connected to each active

    appliance. That is, you will specify Accelerate, type in the subnet

    identifier, and select the appliance that the subnet is attached to.

    (Note : Only appliances that have successfully connected to the WAN-Scaler Controller will be listed. If your appliance is not listed, you must

    fix its connectivity problem before continuing.)

    Repeat for each subnet that is local to a given appliance. Repeat for all appliances.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 27 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    28/54

    If you wish to use acceleration only for a single port (not recommended),such as port 80 for HTTP, replace the wildcard in the Ports field with

    this value. To support more than one port, add additional rules, one perport.

    If you wish to exclude some portion of the included range, add an Ex-clude rule and move it abovethe more general rule. For example, if ac-celeration is not desired on port 80 on 69.59.212.89, add an exclusion in

    this table.

    In general, narrow rules (usually exceptions) should be listed first, thengeneral rules.

    Press the Save link. Changes will not be saved if you navigate awayfrom this page without saving.

    The default action is to not accelerate; only addresses/ports that matchan Accelerated rule (before matching an Excluded rule) are acceler-

    ated.

    3 .7 . I ns ta l l W ANScale r Cl ien ts

    The WANScaler Client is an executable MSI (Microsoft installer) file that is

    downloaded and installed as with any other Web-distributed program. This file isobtained from your Citrix WANScaler representative.

    3 .7 .1 . Cus tom iz ing th e W ANScale r Cl ien t So f t w are

    The WANScaler Client can be customized with the IP address of your WANScalerController. When this is done, the user does not need to type in any configuration

    information when installing the software.

    The basic method of performing this is to use an MSI file editor. The details are givenin Section 2.5.1.

    3 .7 .2 . Dow n load ing

    1. Obtain the WANScaler Client software (a file in the form of WANSca-

    ler*.msi) from your WANScaler representative.

    2. Copy the file to the client system by some convenient means (sharedfilesystem, FTP server, Web download, etc.)

    3. The WANScaler*.msi file is an installation file. Close all applications and

    open windows, then launch the installer it in the usual way (double-click onit in a file window, or use the Run command).

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 28 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    29/54

    Figure 15. WANScaler Client installation screen.

    4. The installation program will ask you where to install the software. Thisdirectory will be used for both the client software and the disk-based com-

    pression history. Together, they require a minimum of 350 MB of disk space.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 29 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    30/54

    5. Once the installer finishes, you must restart the system. After restarting, the

    WANScaler Client will start automatically.

    3 .7 .3 . I ns ta l l a t i on Troub leshoo t ing

    If you have any difficulty with the installation step, the problem is usually thatexisting networking, firewall, or antivirus software is interfering with the installation.

    Usually, once the installation is complete, there are no further problems.

    If the installation fails, try these steps:

    Make sure the Client installation file has been copied to your local system.

    Disconnect any active VPN/remote networking clients.

    Disable any firewall and antivirus software temporarily.

    If some of this is difficult, do what you can.

    Reinstall the WANScaler Client.

    If this doesnt work, reboot the system and try again.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 30 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    31/54

    3 .7 .4 . Runn ing t he Cl ien t Fo r t he Fi rs t T im e

    6. Launch ProgramsCitrixWANScaler Client. This is not the Client software

    itself, which starts automatically, but the Client management utility..

    Figure 16. WANScaler Client configuration page.

    7. Press the Configuration tab. Set the following parameters:

    Enter the WANScaler Controllers IP address in the Host field in theWANScaler Management System field. (If your software distribution has

    been customized to pre-populate this field, you can skip this step.)

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 31 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    32/54

    Select an amount of disk space to use for compression, via the Disk Us-age: Used by Compression pull-down menu. More is better. 10 GB is not

    too much, if you have this much disk space available.

    Press the Save button. 8. The WANScaler accelerator is now running. All traffic to accelerated subnets

    will now be accelerated, exceptfor CIFS (windows filesystem) connections,which must be killed and restarted before acceleration will take place. To do

    this reliably, the system must be rebooted.

    3 .8 . Tes t ing th e I ns ta l la t ion

    9. On the clients Configuration tab, the WANScaler Controller: Connection

    Status field should say Connected. The Acceleration Rules table shouldshow the appliances accelerated subnets as Accelerated. If not, check the

    WANScaler Controller IP field and your network connectivity in general.

    10. Click the clients Performance tab to show a performance graph. Traffic in

    red is non-accelerated. Traffic in blue is accelerated.

    11. Open a connection to an WANScaler-accelerated remote site (a server

    whose address is covered by the acceleration rules), using FTP, or some

    other convenient bulk-transfer program. (In this manual, we always use FTPas our example program, but the WANScaler appliance accelerates all TCP-

    based connections, including ssh, rsync, Citrix, CIFS, NFS, Oracle, HTTP,SMTP, and so on.)

    12. Start a data transfer. If the link is otherwise idle, the throughput graph

    should show Accelerated Application Throughput bandwidth at the band-width limit of the remote WANScaler appliance or more, if the file is com-pressible.

    First-pass compression will usually yield a throughput in the range

    of 1:1 to 10:1, depending on the compressibility of the test file. The

    compression ratio of an individual test is hard to judge from the cli-ent, but the View Logs page on the appliance will report the com-

    pression ratio of each connection as part of Close message, whichis logged whenever a connection ends.

    Send the file a second time. This should yield a compression ratio of

    at least 100:1, unless the file is large enough to overflow the cli-ents compression history (which was set in Step 7).

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 32 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    33/54

    The Performance page shows the cumulative compression ratio

    since the WANScaler Client was started. An estimate of the com-

    pression benefit can also be made from the throughput graph(where throughput can greatly exceed the link speed, even when

    the client must share the link with other traffic), or with stopwatchtests.

    13. If you succeed at achieving accelerated connections, your installation is up

    and running! No additional configuration is necessary.

    3 .9 . Troub leshoo t ing App l iances

    3 .9 .1 . Cab l ing and Dup lex ing Prob lem s

    Ethernet cabling errors and full-duplex/half-duplex issues are the most common

    sources of installation problems on the appliance. This is particularly true of 10/100

    Mbps Ethernet links. The two biggest sources of trouble are:

    The incorrect use of straight-through vs. cross-over cables, which causes a totalloss of connectivity on 10/100 Mbps links.

    Links where one side is forced to 100 Mbps full-duplex, and the other is set toAuto-negotiate. A flaw in the Fast Ethernet standard results in the Auto side

    choosing 100 Mbps HALF-duplex in this case. The link works, but at greatly re-duced performance. This can happen at the actual link to the WANScaler appli-

    ance, but long-standing cases are often discovered elsewhere in existing net-works, where they have gone unnoticed because past performance expectations

    have been low.

    Start by verifying that you can connect to the local WANScaler appliance at its

    management IP address (using pings or browsing to the Management interface). Ininline mode, verify that you can connect through the WANScaler appliance to outside

    systems.

    3.9 .2 . Tran sfers are Not Acce lera t ed

    If the transfer succeeds, but is not accelerated (nothing is shown on the WANScaler

    Clients Performance graph) then verify the IP addresses in the clients Configura-tion page, the appliances WANScaler page, and the WANScaler Controllers client

    group rules. An error in IP or netmask will prevent acceleration.

    3 .10 . Troub leshoo t ing Cl ien ts If you fail to reboot the system when requested, the WANScaler Client will not

    run properly.

    A highly fragmented disk can result in poor performance. However, once theWANScaler disk-based compression file is defragmented, it will remain defrag-

    mented forever.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 33 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    34/54

    A failure of acceleration (with no accelerated connections listed in the Diagnos-tics tab usually indicates that something is preventing communication with the

    Appliance or Controller. Check the Alerts listing on the Client, Appliance, orController (whichever is most convenient). Typical causes of connection failures

    are:

    The Appliance is not running, or acceleration has been disabled. The Controller is not running or has not been configured. A firewall is stripping WANScaler TCP options at some point between the

    Client and Appliance (see the WANScaler I nstallation and Users Guide,

    Section 3.6).

    The Client is using an unsupported VPN.

    3 .11 . Troub leshoo t ing WANScale r Con t ro l l e rs

    Controllers are very trouble-free and, so far, no problems have appeared frequently

    enough to warrant mention in this section.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 34 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    35/54

    4. WANSca ler App l iance Com m and Reference

    See the WANScaler Appliance Installation and Users Guidefor full details about

    WANScaler appliances.

    5. WANSca ler Cl ien t Com m and Reference

    5.1 . Conf igu ra t ion Tab

    Figure 17. WANScaler Client configuration page.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 35 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    36/54

    The Configuration page contains the user-settable commands. These consist of:

    WANSca le r Con t r o l l e r ( Must be se t ) : The Host field specifies the IP ad-dress of the WANScaler Controller. The Port field specifies the port to use,

    usually port 443. These values must match those set on the Controller itself.

    Disk Usage: Allows the user to select the amount of disk space used by com-pression. More is better. 10 GB is not too much.

    Acce le ra t ion / Flow -Cont r o l Mode : Not user-configurable.Reports the modeselected on the Appliance. Choices are hardboost and softboost. Softboost isrecommended for use with WANScaler. (Hardboost is an appliance-to-appliance

    mode.)

    Cl ien t Bandw id th L imi t s : Not user-configurable in softboost, which is the onlysupported mode.

    Accelerat ion Rules: Gives an abbreviated list of the acceleration rulesdownloaded from the Controller. The target subnet is shown in the Network

    column. The Appliance doing the acceleration is listed in the Appliance IP col-umn, along with the Acceleration rules are listed as Accelerated if the Client is

    connected to the Appliance. Exclusion rules (subnets or ports for which accel-eration is explicitly denied) are shown as N/A and Excluded.

    Save: If changes are made, they do not take effect until the Save button ispressed. Saved changes are persistent across reboots.

    Enable WANScaler Cl ient : Enables the WANScaler service, if it is stopped. Theenabling process takes several seconds, but no connections are broken. The en-able/disable choice is persistent across system restarts.

    Disable W ANScaler : The reverse case from the Enable WANScaler button.Accelerated connections will be reset.

    Statu s Line: The status line at the bottom of the page gives the current opera-tional status and the revision number of the Client.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 36 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    37/54

    5.2 . Per fo rm ance Tab

    Figure 18. WANScaler Client performance page.

    The Performance page gives the current performance of accelerated connections,as seen by the application.

    Acce le ra ted / Non-Acce le ra ted App l i cat ion Throughpu t . This is a second-by-second performance graph, giving the data delivered to or received from ap-plications in any given second. Accelerated traffic is in blue; non-accelerated

    traffic is in red. Non-accelerated traffic consists of all traffic that does not matchthe acceleration rules.

    Internal buffering by either the application or the WANScaler Client can makethis data appear spikier than what is sent over the WAN itself. Compression al-

    lows this throughput to exceed the link speed.

    Bytes Be fo re Com press ion . This is the amount of data accepted from applica-tions or delivered to them, counting only accelerated connections.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 37 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    38/54

    Bytes A f te r Com press ion . This is the amount of data actually send over theWAN link, counting only accelerated connections.

    Bytes Non-Acce le ra ted . This is the amount of other data send and received,counting both WAN and LAN connections.

    Compression Rat io . This is the ratio of bytes before compression divided bybytes after compression. This is a cumulative measurement of the compressionresults since the last system reboot (or the last time the WANScaler server

    process was started). It is dependent on the amount of repetition seen in theaccelerated data. Individual connections vary between 1:1 and 10,000:1 com-

    pression.

    5.3 . D iagn ost ics Tab

    The Diagnostics page reports the number of connections in different categories, and

    the state of the connection with the WANScaler Controller.

    Figure 19. WANScaler Client diagnostics page.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 38 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    39/54

    Accelerated Connect ions: The number of open connections between theWANScaler Client and WANScaler appliances.

    Non-Accelerated Connect ions: Open connections that are not being acceler-ated.

    Accelerated CI FS Conn ect ions: The number of open, accelerated connectionswith CIFS (Windows filesystem) servers. This is usually the same as the number

    of mounted network filesystems.

    Cl ien t Name: The name of this client system as seen by the WANScaler Con-troller.

    Connect ion Status: If the client is connected to the WANScaler Controller, thiswill say Connected. Otherwise, it will say Disconnected.

    If the client has a WANScaler Controller defined on the Configuration page, itwill attempt to stay connected to the WANScaler Controller continuously. How-

    ever, it will continue to run and accelerate connections in the face of an inter-mittent connection, so long as it has been able to connect at least once within

    the last three days.

    Star t T rac ing / Stop Trac ing . Your WANScaler representative may ask you tomake a connection trace to help pinpoint problems. This button starts and stops

    the trace. When you stop tracing, a window pops up showing the trace files.These should be sent to your WANScaler representative by the means they rec-

    ommend.

    5.4 . Un ins ta l l in g t he W ANScaler Cl ien t

    To uninstall the WANScaler Client, use the Add/Remove Programs utility under

    Control Panel. The WANScaler Client is listed as WANScaler in the list of currentlyinstalled programs. Select it and press the Remove button.

    You must restart the system to finish uninstalling the client.

    5.5 . Updat in g t he W ANScaler Cl ien t

    To install a newer version of the WANScaler Client, follow the same procedure you

    used when installing the Client for the first time.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 39 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    40/54

    6 . W ANScale r Con t ro l le r Com m and Re fe rence

    The installation instructions give all the WANScaler commands that you need to use

    in a typical installation. Additional functionality of the WANScaler Controller is given

    in this section.

    6.1 . Dashboar d

    Figure 20. WANScaler Controller Dashboard page.

    This is the WANScaler Controller's main page. It gives a top-level view of yourWANScaler network, especially the error/warning status ("Alerts"), the number of

    units connected, and licensing information.

    Active Alerts. This displays a bar graph of error and warning messages from allthe clients and appliances in your WANScaler network. Clicking the graph will

    take you to the Alerts page.

    Appliances Connected. Gives the number of appliances currently connected.Each appliance attempts to maintain a continuous connection with the WANSca-

    ler Controller. Clicking either link will take you to the Appliances page.

    WANScaler Clients Connected. Gives the number of WANScaler Clients currentlyconnected. Each client attempts to maintain a continuous connection with theWANScaler Controller, though this may be interrupted due to system shutdown,

    power management, moving out of wireless range, loss of VPN connectivity, and

    other events. Clicking either link will take you to the Clients page.

    WANScaler Controller Version. Identifies the release and build number of theWANScaler Controller. This is useful if you need to contact Support.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 40 WANScaler_Client_System_Guide_070907.doc

    http://172.16.0.110/misc/help_topics.aspx#Alertshttp://172.16.0.110/misc/help_topics.aspx#Alertshttp://172.16.0.110/misc/help_topics.aspx#Applianceshttp://172.16.0.110/misc/help_topics.aspx#Applianceshttp://172.16.0.110/misc/help_topics.aspx#View%20All%20OrbitalEdge%20Clientshttp://172.16.0.110/misc/help_topics.aspx#View%20All%20OrbitalEdge%20Clientshttp://172.16.0.110/misc/help_topics.aspx#View%20All%20OrbitalEdge%20Clientshttp://172.16.0.110/misc/help_topics.aspx#View%20All%20OrbitalEdge%20Clientshttp://172.16.0.110/misc/help_topics.aspx#Applianceshttp://172.16.0.110/misc/help_topics.aspx#Applianceshttp://172.16.0.110/misc/help_topics.aspx#Alertshttp://172.16.0.110/misc/help_topics.aspx#Alerts
  • 7/31/2019 WANScaler Client System Guide 070907

    41/54

    6 .2 . Ge t t ing S ta r t ed

    Figure 21. WANScaler Controller Getting Started page.

    Displays the "Getting Started" overview of the WANScaler system, which hopefully

    will not tell you anything that you dont already know by the time you have gotten sofar in this manual.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 41 WANScaler_Client_System_Guide_070907.doc

    http://172.16.0.110/root/getting_started.aspxhttp://172.16.0.110/root/getting_started.aspx
  • 7/31/2019 WANScaler Client System Guide 070907

    42/54

    6.3 . App l iances

    Figure 22. WANScaler Controller Appliances page.

    The Appliances page lists all the active appliances, gives their status, and provides

    links to additional information.

    Name. Gives the name of the appliance. By default, this is the appliance's IPaddress, but you can edit the field to any name you like.

    Version. Identifies the release and build number of the WANScaler Appliance.This is useful if you need to contact Support.

    Connected IP. The IP address of the appliance, as seen by the WANScaler Con-troller. Network address translation may cause this address to differ from the

    address as seen by the appliance.

    Status. Shows a green link if the appliance is connected, a gray link if it is not,and a red link if it requires attention. The link takes you to the Appliance Details

    page.

    Redirector Address: Port. This is IP address that the Client uses to connect tothe Appliance. The port number is used for the control connection, used by the

    Client to exchange status information with the Appliance. These values are de-

    fined on the WANScaler Client page on the Appliance.

    Redirector Alias. An additional address that maps to the Appliances RedirectorIP. Useful if the network address translation requires that a different address beused depending on which side of a firewall a connection is coming from. When

    trying to connect to the Appliance, the Client will try the Redirector Address

    first, then the Alias.

    Save. If you make changes to appliance configuration, you must press the"Save" link, or your changes will be lost.

    Delete. Appliances are detected automatically, so the "Delete" link has littleeffect unless an appliance has been removed permanently. Otherwise, it willsoon reappear on the list.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 42 WANScaler_Client_System_Guide_070907.doc

    http://172.16.0.110/misc/help_topics.aspx#Details%20For%20Appliancehttp://172.16.0.110/misc/help_topics.aspx#Details%20For%20Appliancehttp://172.16.0.110/misc/help_topics.aspx#Details%20For%20Appliancehttp://172.16.0.110/misc/help_topics.aspx#Details%20For%20Appliance
  • 7/31/2019 WANScaler Client System Guide 070907

    43/54

    6.3.1 .1 . Appl iance Deta i ls

    This page gives additional details for the selected appliance.

    The Alerts value is also a link that will display any active Alerts for the selectedAppliance.

    The Launch Appliance Console link will navigate to the UI of the Appliance.

    Figure 23. WANScaler Controller Appliance Details page.

    6.4 . Cl ien t s

    Figure 24. WANScaler Controller Clients page.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 43 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    44/54

    The Clients page is similar to the Appliances page. It lists all known clients and

    summarizes the properties of each.

    OS. An icon indicating the operating system of the client. Name. The client's name. This defaults to the name defined on the client system

    itself, but the field can be edited to any value.

    Version. The release and build number of the WANScaler Client software. Hostname. The hostname as reported by the client. Connected IP. The IP of the client as seen by the Controller. Status.Enabled if there is an open connection between the Client and Control-

    ler; Disconnected otherwise.

    Save. If you have changed the clients name, this will save it. Delete. Removes the client from the list. The client will be added back to the list

    if it ever reconnects.

    Delete Disconnected. This will remove all disconnected clients from the list.They will be added back to the list if they ever reconnect.

    6.5 . Cl ien t Rul es

    Figure 25. WANScaler Controller Client Groups page.

    The Client Rules page maps subnets or ports to Appliances.

    Select Hardboost or Softboost: This should always be set to softboost.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 44 WANScaler_Client_System_Guide_070907.doc

    http://172.16.0.110/misc/help_topics.aspx#Details%20For%20OrbitalEdge%20Clienthttp://172.16.0.110/misc/help_topics.aspx#Edit%20Client%20Grouphttp://172.16.0.110/misc/help_topics.aspx#Edit%20Client%20Grouphttp://172.16.0.110/misc/help_topics.aspx#Details%20For%20OrbitalEdge%20Client
  • 7/31/2019 WANScaler Client System Guide 070907

    45/54

    Rule Type. Rules specify one of two actions: Accelerate or Exclude (do notaccelerate). Rules are evaluated in order, and the action specified by the first

    matching rule is used.

    Subnet. This entry specifies the subnet covered by the rule. This takes theconventional IP address/netmask format, where the IP address is a dotted quad

    and the netmask specifies the number of bits in the network portion of the ad-dress, such as 10.0.0.0/8 for the Class A network at 10.0.0.0.

    Ports. Either * or a single port number. Appliance. A pull-down menu listing all known appliances. Add, Insert, Delete, Up, Down. These controls allow you to move, add, or re-

    move rules. The column of radio buttons allows you to select the navigationpoint.

    Save. Changes are not stored until you press the "Save" link.Best Pract ices:

    For proper operation, the rules should be defined as follows: For each appliance, add a rule for every subnet on the same LAN as the appli-

    ance. For example, an appliance at "172.16.0.102" may be LAN-connected tosubnets "172.16.0.0/24" and "172.17.0.0/24". Add a rule for each.

    Sometimes an appliance accelerates only a single IP address, or a small numberof addresses. Enter each of these addresses as well. For example, an appliancethat accelerates a single IP address at 69.59.212.183 would have a rule for

    69.59.212.183 or 69.59.212.183/32 the two are equivalent.

    Leave the "Port #" field set to "*".

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 45 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    46/54

    6 .6 . Ale r t s

    Figure 26. WANScaler Controller Alerts page.

    The Alerts page shows all of the current warning or error messages. Some transient

    alerts time out after the condition (such as high packet loss) has been absent for anhour. Others are persistent until cleared. By unchecking the "Show active alerts only"

    box, expired alerts can be seen.

    Most alerts require no administrative action and are for informational purposes only.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 46 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    47/54

    6 .7 . Sys tem Se t t ings

    Figure 27. WANScaler Controller System Settings page.

    The Settings page shows a list of system settings:

    Standard Network Settings: hostname, IP address, netmask, gateway, DNSservers, NTP server, timezone, date/time

    Service Port: the port used to communicate with WANScaler Clients and appli-ances. Must be changed on every WANScaler unit in your network if you do not

    wish to use the default (Port 443).

    SSL Cert ificate Lifetim e: The WANScaler Controller issues SSL certificates to theappliances and clients it knows about. These certificates expire eventually (and

    are auto-renewed upon expiration). The lifetime is set here.

    Allow Only HTTPS Access. By default, the WANScaler Controller can be accessedeither by HTTP HTTPS. By checking this box, only HTTPS access is allowed.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 47 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    48/54

    6 .8 . Ex p o r t / I m p o r t / Fa ct o r y D ef au l t s

    Figure 28. WANScaler Controller Import/Export page.

    To save the WANScaler Controller's configuration to a file, press the "export"link.

    To restore the WANScaler Controller's configuration from a file, press the "im-port" link.

    In either case, a filename box will prompt for the filename.

    To reset the WANScaler Controller to its factory settings, press the reset link.This will reset the configuration and restore the factory-default admin password.

    6.9 . Cl ien t D iagnost ic Set t ing s

    Figure 29. WANScaler Controller Client Diagnostics page.

    This page allows core files and other diagnostic material to be uploaded automati-cally from clients to a specified ftp repository, and a notification to be sent by email

    that this has happened.

    To use this feature, enter the hostname or IP address of the FTP server, theport (usually 20), login information, and subdirectory.

    To receive email on FTP upload attempts, enter a valid email address in the"Diagnostic email" field.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 48 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    49/54

    Select the "Are client pop up windows allowed?" box if error messages are to beshown to end users.

    Select the "Automatically upload?" box if client core files are to be uploadedautomatically on failures.

    Press the "Save" link to commit your changes.

    6.10. HTTPS Conf igurat ion

    Figure 30. WANScaler Controller HTTPS Configuration page.

    This page allows you to add your own HTTPS certificates and private keys to the

    WANScaler Controller. The controller comes with default certificates and keys, butthose provided by your own certificate system (if you have one) are preferred.

    To use, paste the new certificate or key text into the box provided, and press the

    "Import" link.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 49 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    50/54

    6 .11 . Upda te So f t w are

    Figure 31. WANScaler Controller Update Software page.

    This page allows you to update the WANScaler Controller with the latest version ofsoftware. When executed, this feature will cause the new version of the software to

    be downloaded to the WANScaler Controller server and installed. Subsequently, alllogged in users will be disconnected.

    To use, the new version of the WANScaler Controller software must first be obtainedfrom Citrix and downloaded onto your local computer (where you are running your

    browser). The software will be released in a zipped controller setup file (will end in

    .gz). Either type the full path to the controller setup file on the local computer or usethe browse button to select the file. Press the "Update" link to cause the software to

    be downloaded and installed. You will be prompted to ensure that this is correct.

    Click "OK".

    6.12 . User Setu p

    Figure 32. WANScaler Controller Users page.

    This page allows you to add new users to the WANScaler Controller. (To edit your

    own profile, use the My Profile page instead.) For the benefit of end-users of theWANScaler Client, enter your name, email address, and phone numbers into the

    fields provided.

    Additional users can be defined if desired. There are two classes of user: Read-only

    and Read-write. Only read-write users can make changes to the controller.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 50 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    51/54

    6.1 3. License

    Figure 33. WANScaler Controller My Profile page.

    This page allows you to enter a new license key. Paste the license data into the boxand press Import. If there is no valid license, the Missing License message will be

    displayed, as shown above.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 51 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    52/54

    6 .14 . My Pro f i l e

    Figure 34. WANScaler Controller My Profile page.

    This page allows you to modify your contact information or change your password.For the benefit of end-users of the WANScaler Client, enter your name, email ad-

    dress, and phone numbers into the fields provided. This is particularly important forthe Admin account.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 52 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    53/54

    6.15 . Help

    Figure 35. WANScaler Controller Help page.

    Displays online help.

    6.16 . Logout

    Figure 36. WANScaler Controller Logout dialog.

    Logs you off the WANScaler Controller.

    Copy r i gh t 2007 Ci t r i x Sy stem s , I nc . 53 WANScaler_Client_System_Guide_070907.doc

  • 7/31/2019 WANScaler Client System Guide 070907

    54/54

    7. Spec i f i ca t ion s

    Physica l WANScaler Cont ro l le r

    Height 1.68 in. (4.2 cm)

    Width 16.7 in. (42.5 cm)

    Depth 23.1 in. (58.6 cm)

    Weight 27 lb (12.27 kg) max.

    Power Supp ly

    Wattage 280

    Voltage 100240 VAC, 5060 Hz

    Te mp e ra tu re

    OperatingTemperature

    50F to 95F (10C to 35C)

    StorageTemperature

    40F to 149F (40C to 65C)