{"id":8582,"date":"2022-05-03T02:55:11","date_gmt":"2022-05-03T09:55:11","guid":{"rendered":"https:\/\/www.xh86.me\/?p=8582"},"modified":"2022-05-03T02:55:11","modified_gmt":"2022-05-03T09:55:11","slug":"poc%e6%89%8b%e5%86%8c-08-netscaler-access-gateway%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=8582","title":{"rendered":"PoC\u624b\u518c – 08 NetScaler Access Gateway\u914d\u7f6e"},"content":{"rendered":"

\u6807\u51c6\u5316\u5b9e\u65bd\u6307\u5357 | \u767d\u76ae\u4e66 | Citrix<\/strong><\/p>\n

\"Citrix<\/div><\/p>\n

PoC\u6807\u51c6\u5316\u5b9e\u65bd\u6307\u53573.0<\/strong><\/p>\n

NetScaler Access Gateway\u914d\u7f6e<\/strong><\/p>\n

\u7248\u672c\uff1aDraft<\/strong><\/p>\n

www.citrix.com.cn<\/p>\n

<\/div><\/p>\n

\u7b2c1\u7ae0 \u6682\u5b9a\u529f\u80fd\u5217\u8868 18<\/a><\/p>\n

Citrix\u4ea7\u54c1\u53ca\u6240\u4f7f\u7528\u7cfb\u7edf\u7248\u672c 19<\/a><\/p>\n

\u4fee\u6b63\u5386\u53f2 20<\/a><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\u6b65\u9aa4<\/strong><\/th>\n\u64cd\u4f5c<\/strong><\/th>\n<\/tr>\n<\/thead>\n
<\/td>\n\u672c\u6b21\u5b9e\u9a8c\u91c7\u7528Citrix ADC VPX\uff0c\u9996\u5148\u4eceCitrix\u5b98\u7f51\u4e0b\u8f7dADC\u6240\u5bf9\u5e94\u7684VPX\uff0c\u7136\u540e\u5bfc\u5165Citrix Hypervisior<\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u9009\u62e9VPX\u6240\u9700\u8981\u653e\u7f6e\u7684\u670d\u52a1\u5668\u548c\u5b58\u50a8\u548c\u7f51\u7edc<\/p>\n

<\/div><\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u5b8c\u6210\uff0c\u5f00\u59cb\u5bfc\u5165ADC VPX<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u5728Console\u754c\u9762\u4e2d\u8f93\u5165VPX IP (\u7ba1\u7406IP)\uff0c\u5b50\u7f51\uff0c\u63a9\u7801\u4fe1\u606f<\/p>\n

\u4fdd\u5b58\u5e76\u9000\u51fa<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6253\u5f00\u6d4f\u89c8\u5668\uff0c\u4f7f\u7528\u9ed8\u8ba4\u8d26\u53f7nsroot\/nsroot\u767b\u9646<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u914d\u7f6eSubnet IP<\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u914d\u7f6eHost Name, DNS, \u7b49<\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u5b8c\u6210\uff0c\u6839\u636e\u63d0\u793a\u91cd\u542fVPX<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u91cd\u542f\u540e\u767b\u9646VPX,<\/p>\n

\u6253\u5f00System \u2013 License \u2013 Manage Licenses\u2026<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6dfb\u52a0License\u540e\uff0c\u518d\u6b21\u91cd\u542fVPX<\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6253\u5f00System \u2013 Settings – Mode and Features \u2013 Configure Basic Features<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u542f\u7528\u76f8\u5173\u529f\u80fd<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230Traffic Management\u2014SSL\u2014SSL Files\uff0c\u70b9\u51fbCreate RSA Key\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165Key\u540d\u79f0\uff0cKey Size\uff0c\u9009\u62e9\u52a0\u5bc6\u65b9\u5f0fDES3\uff0c\u8f93\u5165\u6b64Key\u7684\u5bc6\u7801\u3002\u70b9\u51fbCreate\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230SSL\u2014CSRs\uff0c\u70b9\u51fbCreate Certificate Signing Request\uff08CSR\uff09\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165CSR\u6587\u4ef6\u7684\u540d\u79f0\uff0c\u6d4f\u89c8\u5230\u521a\u521a\u5efa\u7acb\u7684RSA key\uff0c\u8f93\u5165Key\u7684\u5bc6\u7801\uff0c\u52a0\u5bc6\u53ef\u4e3aSHA256\uff0c\u8f93\u5165Common name\uff0c\u8fd9\u91cc\u662fpoc.citrixlab.local\uff0c\u8f93\u5165Organization name\uff0c\u8fd9\u91cc\u4e3acitrixlab\uff0c\u8f93\u5165state\uff0ccountry\u7b49\u5fc5\u586b\u9879\uff0c\u70b9\u51fbcreate\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230\u521a\u521a\u5efa\u7acb\u7684CSR\u6587\u4ef6\uff0c\u70b9\u51fbView\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u590d\u5236CSR\u6587\u4ef6\u5185\u5bb9\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u901a\u8fc7\u6d4f\u89c8\u5668\u6253\u5f00\u8bc1\u4e66\u7533\u8bf7\u670d\u52a1\uff0c\u70b9\u51fb\u7533\u8bf7\u8bc1\u4e66\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fb\u9ad8\u7ea7\u8bc1\u4e66\u7533\u8bf7\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u7c98\u8d34CSR\u5185\u5bb9\uff0c\u9009\u62e9Web\u670d\u52a1\u5668\u4e3a\u8bc1\u4e66\u6a21\u677f\uff0c\u9644\u52a0\u5c5e\u6027\u53ef\u4ee5\u8bbe\u7f6e\u4e3asan:dns=poc.citrixlab.local\uff0c\u70b9\u51fb\u63d0\u4ea4\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u9009\u62e9base64\u7f16\u7801\uff0c\u4e0b\u8f7d\u8bc1\u4e66\u94fe\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u8bc1\u4e66\u94fe\u6587\u4ef6\uff0c\u5206\u522b\u5bfc\u51fa\u6839\u8bc1\u4e66\u548c\u670d\u52a1\u5668\u8bc1\u4e66<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230Traffic management\u2014SSL\u2014Certificates\u2014Server Certificate\uff0c\u70b9\u51fbinstall\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165Certificate key pair\u540d\u79f0\uff0c\u9009\u62e9\u521a\u521a\u5bfc\u51fa\u7684\u7684server\u8bc1\u4e66\uff0c\u9009\u62e9\u4e4b\u524d\u5efa\u7acb\u7684RSA key\u5e76\u8f93\u5165\u5176\u5bc6\u7801\uff0c\u70b9\u51fbinstall\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u786e\u8ba4\u770b\u5230\u670d\u52a1\u5668\u8bc1\u4e66\u51fa\u73b0\u518dserver Certificates\u4e2d\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230Traffic Management\u2014SSL\u2014Certificates\u2014CA Certificates\uff0c\u70b9\u51fbinstall\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165Certificate key pair\u540d\u79f0\uff0c\u6d4f\u89c8\u5230\u521a\u521a\u5bfc\u51fa\u7684CA\u6839\u8bc1\u4e66\u3002\u70b9\u51fbinstall\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u786e\u8ba4\u6839\u8bc1\u4e66\u51fa\u73b0\u5728CA Certificates\u4e2d\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u6d4f\u89c8\u5230XenApp and XenDesktop\uff0c\u70b9\u51fbGet Started\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u9009\u62e9storefront\u3002\u70b9\u51fbcontinue\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165Gateway FQDN\uff0c\u8fd9\u91cc\u4e3apoc.citrixlab.local\uff0c\u8f93\u5165Gateway IP\u5730\u5740\uff0c\u5373virtual IP\u5730\u5740\uff0c\u70b9\u51fbcontinue\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fbyes\uff0c\u542f\u7528LB\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u786e\u8ba4server Certificate\u9ed8\u8ba4\u6d4f\u89c8\u5230\u670d\u52a1\u5668\u8bc1\u4e66\uff0c\u70b9\u51fbcontinue\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165storefront URL\uff0c\u8fd9\u91cc\u4e3ahttps:\/\/ctxddc01.citrixlab.local<\/a>\uff0c\u70b9\u51fbretrieve stores\uff0c\u4f1a\u81ea\u52a8\u68c0\u6d4b\u5230Receiver for web path\uff0c\u8fd9\u91cc\u4e3a\/citrix\/storeweb\uff0c\u8f93\u5165AD domain\uff0c\u8f93\u5165secure ticket authority URL\uff0c\u8fd9\u91cc\u4e3ahttp:\/\/ctxddc01.citrixlab.local<\/a> \uff0c\u70b9\u51fbcontinue\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8ba4\u8bc1\u7c7b\u578b\u9009\u62e9\u4e3adomain\uff0c\u8f93\u5165\u4ee5\u4e0b\u4fe1\u606f\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fbtest connection\uff0c\u6d4b\u8bd5\u53ef\u5426\u8fde\u901adomain\uff0cserver logon name attribute\u9009\u62e9\u4e3asAMAccountName\uff0c\u70b9\u51fbcontinue\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fbDone\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u56de\u5230 Configuration \u2013 Citrix Gateway \u2013 Virtual Srevers\uff0c\u53ef\u4ee5\u770b\u5230Netscaler Gateway Virtual Server\u5df2\u5efa\u7acb<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u7f16\u8f91\u5f53\u524dVirtual Server\uff0cBasic Settings \u2013 \u52fe\u9009 ICA Only<\/p>\n

<\/div><\/p>\n

<\/div><\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8fdb\u5165Storefront\u63a7\u5236\u53f0\uff0c\u6d4f\u89c8\u5230storefront\u2014\u5e94\u7528\u5546\u5e97\uff0c\u53f3\u952e\u73b0\u6709\u7684Store\uff0c\u9009\u62e9\u2018\u914d\u7f6e\u8fdc\u7a0b\u8bbf\u95ee\u8bbe\u7f6e\u2019<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u52fe\u9009\u2018\u542f\u7528\u8fdc\u7a0b\u8bbf\u95ee\u2019- \u2018\u5141\u8bb8\u7528\u6237\u4ec5\u8bbf\u95ee\u901a\u8fc7StoreFront\u4ea4\u4ed8\u7684\u8d44\u6e90(\u65e0VPN\u901a\u9053)\u2019<\/p>\n

Citrix Gateway \u8bbe\u5907 \u2013 \u70b9\u51fb\u2018\u6dfb\u52a0\u2019<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165 Gateway URL (\u9700\u8981\u548cGateway\u8bc1\u4e66\u4e0a\u7684URL\u76f8\u540c)<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fb\u6dfb\u52a0\uff0c\u8f93\u5165STA URL\uff0c\u70b9\u51fb\u786e\u5b9a\uff0c\u70b9\u51fb\u4e0b\u4e00\u6b65\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u8f93\u5165vServer IP (Netscaler Gateway\u7684Virtual IP)\uff0c\u70b9\u51fb\u521b\u5efa<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fb\u5b8c\u6210\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u70b9\u51fb \u786e\u5b9a\uff0c\u5b8c\u6210\u914d\u7f6e<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u5728\u670d\u52a1\u5668\u672c\u5730HOSTS\u6587\u4ef6\u4e2d\u52a0\u4e00\u6761Netscaler AG \u7684\u8bb0\u5f55<\/p>\n

192.168.50.67 poc.citrixlab.local<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n\u5728\u6d4b\u8bd5\u7684\u5ba2\u6237\u7aef\u672c\u5730\u6dfb\u52a0Netscaler AG host\u8bb0\u5f55<\/p>\n

\u7136\u540e\u8f93\u5165\u5bf9\u5916\u8bbf\u95ee\u5730\u5740\uff0c\u6d4b\u8bd5\u3002<\/p>\n

<\/div><\/td>\n<\/tr>\n
<\/td>\n
<\/div><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a> Citrix\u4ea7\u54c1\u53ca\u6240\u4f7f\u7528\u7cfb\u7edf\u7248\u672c<\/p>\n\n\n\n\n\n\n\n\n
\u4ea7\u54c1<\/strong><\/td>\n\u7248\u672c<\/strong><\/td>\n<\/tr>\n
XenDesktop<\/td>\n1912<\/td>\n<\/tr>\n
XenApp<\/td>\n1912<\/td>\n<\/tr>\n
PVS<\/td>\n1912<\/td>\n<\/tr>\n
XenServer<\/td>\n7.1 CU2<\/td>\n<\/tr>\n
NetScaler<\/td>\n12.1<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a> \u4fee\u6b63\u5386\u53f2<\/p>\n\n\n\n\n\n\n\n
\u4fee\u6b63<\/strong><\/td>\n\u6539\u53d8\u8bf4\u660e<\/strong><\/td>\n\u66f4\u65b0\u8005<\/strong><\/td>\n\u65e5\u671f<\/strong><\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u5173\u4e8e\u601d\u6770<\/strong><\/p>\n

Citrix\uff08\u7eb3\u65af\u8fbe\u514b\u80a1\u7968\u4ee3\u7801\uff1aCTXS\uff09\u65e8\u5728\u5efa\u7acb\u4eba\u3001\u4f01\u4e1a\u548c\u5404\u79cd\u4e8b\u7269\u53ef\u4ee5\u968f\u65f6\u4e92\u8054\u7684\u65b0\u4e16\u754c\uff0c\u5e2e\u52a9\u4eba\u4eec\u4e0d\u65ad\u521b\u9020\u5947\u8ff9\u3002\u516c\u53f8\u81f4\u529b\u4e8e\u5f00\u53d1\u5148\u8fdb\u7684\u6280\u672f\uff0c\u786e\u4fdd\u6240\u6709\u5e94\u7528\u548c\u6570\u636e\u5b89\u5168\u65e0\u865e\u4e14\u6613\u4e8e\u63a5\u5165\uff0c\u5e2e\u52a9\u4eba\u4eec\u968f\u65f6\u968f\u5730\u9ad8\u6548\u5730\u529e\u516c\u3002Citrix\u63d0\u4f9b\u4e00\u6574\u5957\u96c6\u6210\u7684\u5de5\u4f5c\u7a7a\u95f4\u5373\u670d\u52a1\u3001\u5e94\u7528\u4ea4\u4ed8\u3001\u865a\u62df\u5316\u3001\u79fb\u52a8\u6027\u3001\u7f51\u7edc\u4ea4\u4ed8\u548c\u6587\u4ef6\u5171\u4eab\u89e3\u51b3\u65b9\u6848\uff0c\u8ba9\u7528\u6237\u5728\u4efb\u4f55\u8bbe\u5907\u4e0a\u901a\u8fc7\u4efb\u4f55\u7f51\u7edc\u548c\u4e91\u5373\u65f6\u8bbf\u95ee\u5e94\u7528\u3001\u684c\u9762\u3001\u6570\u636e\u548c\u670d\u52a1\u30022016\u5e74Citrix\u516c\u53f8\u7684\u8425\u4e1a\u6536\u5165\u4e3a34.2\u4ebf\u7f8e\u5143\uff1b\u5176\u89e3\u51b3\u65b9\u6848\u5728\u5168\u7403\u8d85\u8fc740\u4e07\u5bb6\u4f01\u4e1a\u53ca1\u4ebf\u7528\u6237\u4e2d\u5907\u53d7\u63a8\u5d07\u3002\u66f4\u591a\u4fe1\u606f\u8bf7\u8bbf\u95eewww.citrix.com\u3002<\/p>\n

\u00a92017\u601d\u6770\u7cfb\u7edf\u516c\u53f8\u7248\u6743\u6240\u6709\uff0c\u4fdd\u7559\u6240\u6709\u6743\u5229\u3002Citrix\u00ae, Branch Repeater\u2122, Citrix Repeater\u2122, HDX\u2122, XenServer\u2122, XenApp\u2122, XenDesktop\u2122 , XenMobile\u2122, ShareFile\u2122, NetScaler Gateway\u2122, NetScaler insight Center\u2122 and Citrix Delivery Center\u2122\u662f\u601d\u6770\u7cfb\u7edf\u516c\u53f8\u548c\/\u6216\u4e00\u4e2a\u6216\u591a\u4e2a\u5206\u516c\u53f8\u5728\u7f8e\u56fd\u548c\u5176\u4ed6\u56fd\u5bb6\u7684\u5546\u6807\u6216\u6ce8\u518c\u5546\u6807\u3002\u6240\u6709\u5176\u4ed6\u5546\u6807\u548c\u6ce8\u518c\u5546\u6807\u5206\u5c5e\u5b83\u4eec\u5404\u81ea\u7684\u6240\u6709\u8005\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u6807\u51c6\u5316\u5b9e\u65bd\u6307\u5357 | \u767d\u76ae\u4e66 | Citrix PoC\u6807\u51c6\u5316\u5b9e\u65bd\u6307\u53573.0 NetScaler Access G […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,4],"tags":[],"class_list":["post-8582","post","type-post","status-publish","format-standard","hentry","category-citrix","category-virtual"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/8582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8582"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/8582\/revisions"}],"predecessor-version":[{"id":8655,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/8582\/revisions\/8655"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}