Publishing Citrix Xenapp/xendesktop 7.6 using web interface

The company itself built a set of Citrix XenApp7.6, want to access through the external network. The problem is that there is no NetScaler, storefront can not open the external user access, not to mention through the signal to determine whether the user's request is from the external or internal, free version of the NetScaler also has--netscaler VPX Express, This version limits the connection speed of 5Mbps. Another way is to see, with the old version of the Web Interface ... This article is a brief introduction to the Web interface settings, because it is built to complete the environment, I will pick the important settings to do and explain.

650) this.width=650; "title=" clip_image001 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image001 "src=" http://s3.51cto.com/wyfs02/M02/6E/D4/ Wkiol1wjzwoab6vqaaiv6mxpyei171.jpg "height=" 365 "/>

The first is the XenApp 7.6 that has just been installed, and the machine catalog has been created to deliver a remote Desktop MSTSC application, which is the Remote Desktop app that delivered the controller's native. xa_xd7.6 Basic Installation release, please refer to blog post of other great gods.

650) this.width=650; "title=" clip_image002 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/M02/6E/D8/ Wkiom1wjy6vziftnaahsedy-99w723.jpg "height=" 374 "/>

650) this.width=650; "title=" clip_image003 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image003 "src=" http://s3.51cto.com/wyfs02/M00/6E/D4/wKioL1WJZWThf_ Fgaajct4lnyjq796.jpg "height=" 464 "/>

Note that there is no storefront installed in our xa_xd7.6 environment at this time.

Install another Windows R2, and then find an older version of XenDesktop or a xenapp image to plug in, just install Web Access and follow the normal installation (install Web For interface, refer to the blog of the other great gods in 51cto blogs). Add the site directly after the installation is complete. Note the settings at the red box.

Here the XML service chooses HTTP with Port 80.

650) this.width=650; "title=" clip_image004 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image004 "src=" Http://s3.51cto.com/wyfs02/M00/6E/D8/wKiom1WJY6vzEoYWAAHa_ Ssk10e948.jpg "height=" 542 "/>

Then remember to add the URL to the Web interface in the storefront inside the controller

650) this.width=650; "title=" clip_image005 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image005 "src=" http://s3.51cto.com/wyfs02/M00/6E/D4/ Wkiol1wjzwtb6kazaagafmqbxme592.jpg "height=" 356 "/>

In the secure access of WI, note the settings. Change the default "direct" Access method to "converted" and then add a direct access method to the controller (since I have a controller in my environment, I am directly filling in a single host IP instead of a network segment.) ）

650) this.width=650; "title=" clip_image006 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M01/6E/D5/wKioL1WJZWXzY_ Cnaahyojvljps519.jpg "height=" 452 "/>

Click Next, as usual, add an external address or hostname to the controller mapping, 1494, 2598, 80, etc. three ports.

650) this.width=650; "title=" clip_image007 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image007 "src=" http://s3.51cto.com/wyfs02/M01/6E/D8/ Wkiom1wjy6zhhbpvaaiikmpwdvw757.jpg "height=" 451 "/>

650) this.width=650; "title=" clip_image008 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/M02/6E/D5/wKioL1WJZWWQcNFRAAEz_ Gmtvva117.jpg "height=" 366 "/>

Then we mapped the three ports on the firewall, because I've mapped the 80 ports here to the company's official website.

So I tied the site default port to 4443 on the Web interface, and it was SSL bound to 4443, so if you don't need to change the port in your environment, you can ignore this step. Map the regular three ports directly on the firewall.

4443, which is the 80 port in the regular step, maps to webinterface,1494 and 2598 to the controller.

650) this.width=650; "title=" clip_image009 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image009 "src=" http://s3.51cto.com/wyfs02/M02/6E/D8/ Wkiom1wjy62xbpbaaagw07oqpik917.jpg "height=" 384 "/>

Then test on the outside network. can open the Citrix page normally, because I have replaced the port here, so the URL followed: 4443, open the published application test.

650) this.width=650; "title=" clip_image010 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/M00/6E/D5/ Wkiol1wjzwaw1a7taacylp4q6su928.jpg "height=" 315 "/>

650) this.width=650; "title=" clip_image011 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image011 "src=" http://s3.51cto.com/wyfs02/M00/6E/D8/ Wkiom1wjy63yg4fuaafazmwh8eq771.jpg "height=" 377 "/>

650) this.width=650; "title=" clip_image012 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/M00/6E/D8/ Wkiom1wjy67walvmaajjq3d7iha412.jpg "height=" 449 "/>

Opened successfully, and Netstat also saw the correct connection to port 2598.

In a word, the Web interface is responsible for providing authentication for external user connections, as well as the issuance of ICA files, and after the WI server receives a user request, identifies whether the user's request is internal or external, and then the corresponding ICA file is issued.

If it is the intranet user, the issued ICA file with the address must be the controller's intranet address is 192.168.19.7

If the external network of users, issued by the ICA file must be external IP address or hostname.

So the old version of this architecture wi+ new version controller is completely feasible.

Have questions welcome message exchange!

Attached: IIS replace port, bind intranet CA certificate, then convert inside remember change to 4443 to 80

650) this.width=650; "title=" clip_image013 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image013 "src=" http://s3.51cto.com/wyfs02/M01/6E/D5/ Wkiol1wjzwfsoqfeaajcug7czjq163.jpg "height=" 391 "/>

650) this.width=650; "title=" clip_image014 "style=" Border-top:0px;border-right:0px;border-bottom:0px;border-left : 0px; "border=" 0 "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/M01/6E/D5/wKioL1WJZWewSQ6RAAEhQdtTz_ A617.jpg "height=" 355 "/>

Last iisreset

This article is from the "Castamere Rainy season" blog, be sure to keep this source http://sodaxu.blog.51cto.com/8850288/1664773

Publishing Citrix Xenapp/xendesktop 7.6 using web interface