Citrix XenApp 外网访问配置全攻略

需积分: 14 35 下载量 137 浏览量 更新于2024-09-15 收藏 293KB DOCX 举报
"这篇教程详细介绍了如何配置Citrix XenApp以允许外网访问,包括XenApp服务器的内部设置和路由器的端口映射。" Citrix XenApp 是一款广泛使用的应用程序虚拟化解决方案,它允许用户从任何地方访问在集中式服务器上运行的应用程序。在本文中,我们将探讨如何配置 Citrix XenApp 6.5,使得外网用户能够顺利地访问这些应用。 首先,确保你的测试环境已经搭建完毕,内网中的PC1能够正常访问XenApp服务器发布的应用。这涉及到内部网络的正确配置和XenApp服务器的稳定运行。 **一、Web Interface (WI) 的配置** Web Interface是Citrix XenApp的一个关键组件,它提供了用户访问应用的界面。为了使外网用户能够安全访问,你需要进行以下步骤: 1. 右键点击已发布的站点链接,选择“安全访问”选项。 2. 将默认的访问方法更改为“已转换”。这意味着外部用户的请求将经过转换后发送到内网服务器。 3. 添加访问规则,确保内网用户(如192.168.1.0/24网段)的访问方式保持为“直接”,防止其IP被转换导致无法访问。 4. 配置转换规则,将内网XAServer的1494和2598端口映射到公网相应的端口,以确保ICA协议和会话可靠性。 **二、路由器端口映射** 为了让外网流量能正确路由到XenApp服务器和Web Interface服务器,路由器需要进行端口映射配置: 1. 映射内网192.168.1.4的1494端口到公网的1494端口,这是ICA协议所用的端口。 2. 同样映射内网192168.1.4的2598端口到公网的2598端口,确保会话的稳定性。 3. 对于Web Interface服务器192.168.1.3,映射80端口到外网的8088端口,以便外网用户通过HTTP访问。 **三、测试与验证** 最后,通过外网PC2进行端口连通性测试,使用Telnet工具检查110.80.1.230的1494、2598和8088端口是否可以正常连接。如果所有测试都通过,那么外网用户应该能够访问内网发布的应用程序。 此外,文中提到了其他服务器的角色和用途: 1. LICServer(192.168.1.2): 安装了LIC组件,负责提供授权服务。 2. WIServer(192.168.1.3): 安装Web Interface,提供用户界面。 3. XAServer(192.168.1.4): 运行XenApp服务,承载并发布应用程序。 4. SQLServer(192.168.1.5): 提供用于管理XenApp Farm的数据库服务。 这个教程详细解释了如何通过调整XenApp服务器的Web Interface配置和路由器端口映射来实现外网访问。正确实施这些步骤后,无论用户身处何处,都能无缝接入并使用内网部署的应用。
2012-06-17 上传
• Citrix XenApp5.0培训 • 主讲:jaffee • XenApp 5.0 server • Farm:  Citrix XenApp server uses server farms to organize and manage servers.  load balance user sessions  manage the entire set of Citrix XenApp servers from a single point  Users can connect directly to applications, without needing to know the location of an individual server  reconnect to another server and receive the same environment as before when the sever crashs • TwoTechnology • ICA: Independent Computing Architecture  At its heart, ICA intercepts and transports screens from the server that a published application runs on to the client PC It then takes the user’s return input and transmits it back to the server for processing  ICA uses port 1494 by default, or 2598  What Is Actually Being Sent between an ICA Client and a XenApp Server?  ICA works by essentially piggybacking on top of other protocols such as TCP/IP、 UDP and IPX/SPX  The ICA client also can cache frequently used graphics such as icons and menu items • Citrix Session States • TwoTechnology • Independent Management Architecture(IMA)  It is a centralized management subsystem that allows you to define and control the elements of your server farm  Server-to-server communication occurs over TCP port 2512, PMC-to-server communication occurs over TCP port 2513  In essence, it is the technology that allows you to group servers • Citrix Datastore • S tore information within the Citrix XenApp server farm that remains relatively static. Items such as published applications, administrator names and permissions, and server listings • A single datastore is used for each individual server farm • T he datastore can reside on a Citrix XenApp server or on a dedicated host • Citrix XenApp supports Microsoft Access, MS SQL Express, MS SQL Server, IBM DB2 • Disk space requirements for the datastore are approximately 20 MB for every 100 servers • Datastore Usage • Access mode: direct mode and indirect mode  Direct mode :Microsoft SQL or Oracle  Indirect mod:Microsoft Access With the availability of three solutions for the datastore, how do you tell which one best fits your environment? • LHC :Local Host Cache • The LHC is a partial copy of the datastore database that every XenApp server maintains locally to the server itself  Continue running based on the configuration that is last received from the datastore  performance • Data Collector • Manage information that changes frequently, such as current sessions, active licenses, and server and application load values within a zone • The data collector acts as the central point of information when clients connect to your server farm • Every zone with a server farm consists of one active data collector • Bandwidth Requirements for a Server Farm • Server-to-Data-Store Communication KB = 275 + (5 * Servers) + (0.5 * Apps) + (92 * Print Drivers) A farm with 4 severs,12 published applications, and 6 print drivers KB = 275 + (5 * 4) + (0.5 * 12) + (92 * 6) KB = 275 + (20) + (6) + (552) KB = 275 + (578) KB = 853 • Bandwidth Requirements for a Server Farm • Data Collector Communication Bytes = 11000 + (1000 * Con) + (600 * Discon) + (350 * Apps) A server with 20 connected sessions, four disconnected sessions, and nine published applications Bytes = 11,000 + (1,000 * 20) + (600 * 4) + (350 * 9) Bytes = 11,000 + (20,000) + (2400) + (3150) Bytes = 11,000 + (25,550) Bytes = 36,550 or 36.55 KB • Listener Ports • Listener ports work in cooperation with internal system components and client connections • The listener service monitors new client connections and manages the idle sessions. • CPS4.5 vs XenApp 5.0 XenApp 2008/1 Presentation Server MetaFrame WinFrame Note: Xen App5.0:windows server 2003*/2008* CPS4.5 :windows server 2003 * • XenApp Server Editions • XenApp Edition Components • XenApp 5.0 Server License Server • XenApp server will not accept user connections until it can contact a License Server • Citrix provides a 96-hour initial grace period that will allow up to two users to connect while unable to connect to a License Server • Citrix XenApp client • the XenApp Plugin,the XenApp Web Plugin, and Program Neighborhood • Microsoft’s System Center Configuration Manager (SCCM) IBM’s Tivoli Provisioning Manager are used to centralize deployment and maintain software • the XenApp Plugin • Launch applications from her Start | Programs menu • Step:  publishing an application to the XenApp farm  To launch an application from the System Tray icon  DISCONNECT, RECONNECT, AND LOG OFF OF AN APPLICATION WITH THE CONNECTION CENTER • the Citrix XenApp Web Plugin • The Web Plugin is the simplest of the Windows clients and does not allow for as much interaction or configuration. • often be deployed in scenarios where machines are older, slower, or not in need of additional configuration options such as the Start menu and desktop shortcuts • Program Neighborhood • Oldest ICA client version but the most advanced • Many settings are available to users as check boxes or radio buttons • good in the sense that users can enable a setting such as Local Text Echo for just their client if they are a fast typist and the latency of the session cannot keep up; and bad when a user can delete his application set and can’t get connected • the only client that connects to applications on a Citrix server that have not been published for access by users