Features commonly used by CITRIX NETSCALER

Overview

The common features of CITRIX NetScaler are: Lb,cs,gslb,ssl. LB implements the function of server load balancing, CS implementation based on seven layer (domain name, IP, etc.) load balancing, GSLB implementation of the function is global load balancing, SSL implementation of the function is SSL acceleration.

Configuration steps System Configuration Configuration feature

Go to the System menu and select setting

650) this.width=650; "title=" clip_image002 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstfezk5k5aadby8i4jzy630.jpg "" 557 "height=" 222 "/>

Click Basic feature, select feature, select the desired feature, and turn off the

650) this.width=650; "title=" clip_image004 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstnhtk6uraadmbyde9w4348.jpg "" 436 "height=" 347 "/>

Click on the Advanced feature, select the desired feature, do not close all

650) this.width=650; "title=" clip_image006 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstnptaad7aaeydrj6g6o714.jpg "" 483 "height=" 465 "/>

Modify the password for the Nsroot user

NetScaler the default user name and password are nsroot, in order to ensure the security of the device, you need to change the password, or create a new user.

650) this.width=650; "title=" clip_image008 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rstnagaotgaaentofd-ra282.jpg "" 557 "height=" 425 "/>

Modify the password for the Nsroot user, double-click the Nsroot user name, and then change the password

650) this.width=650; "title=" clip_image010 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstghshhigaafbzzgq1bw158.jpg "" 476 "height=" 593 "/>

Configure mode

NetScaler The default is not to enable 2-tier forwarding, if you need to enable 2-tier features, you need to configure in mode,

Go to the Setting menu, click Mode,

650) this.width=650; "title=" clip_image012 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstgpxhyezaae9b2nhnhc000.jpg "" 526 "height=" 439 "/>

Configure system time

Enter the system's operating system with the shell command, and then modify the current system time with the date command

Enter the Tzsetup command to set the time zone, enter the date yymmddhhmm command to modify the system time, in the format: month days hours minutes

Configure time synchronization

Edit two files in text, ntp.conf and rc.conf, with the following contents:

Ntp.conf:

# Netscaler NTP Configuration File

#

# Copy This file to/nsconfig, and make changes to/nsconfig/ntp.conf

# changes in/etc/ntp.conf'll be lost following a reboot.

#

# ADD The following line in/nsconfig/rc.conf to enable NTPD:

#

# ntpd_enable= "YES"

#

# The following addresses is example addresses. There should be a

# corresponding ' Restrict ' entry for every ' server ' entry.

#

#example Address

Server 61.129.42.44 Burst

Restrict default Ignore

Restrict 127.0.0.1 Mask 255.255.255.255

#corresponds to ' server ' entry above

Restrict 61.129.42.44 Mask 255.255.255.255

Note: 61.129.42.44 is an NTP server that can be searched on the internet

Rc.conf:

Ntpd_enable= "YES"

After editing two files, log in to NetScaler using the WinSCP3 tool and copy the two files to the/nsconfig directory. Then restart NetScaler

IP configuration Configuration Nsip

Configure a NSIP to ensure that this IP does not conflict with other IP addresses, this IP is the IP of the device and can be used to manage the system. You need to restart your device after configuring Nsip.

For example: Enter the set NS config-ipaddress 192.168.2.3-netmask 255.255.255.0 at the command line, then enter the Save config to save the configuration, and finally enter the reboot restart, Nsip changes to 192.168.2.3 after device restart

Configuring Snip and routing

Configure the snip, which is the interface IP, and then configure the Xia Lian route and the default route.

Go To menu network, click IPs, and then click Add to add snip, such as: IP address 219.142.6.94, Mask 24 bits. If you want to manage NetScaler through this IP, tick the box under Application access control.

650) this.width=650; "title=" clip_image014 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstocjarv3aagv5ediiue793.jpg "" 557 "height=" 588 "/>

Go to Network-routing-routes, click Add and the default gateway, for example: Gateway is 219.142.6.93; The next hop to the 192.168.3.0 network segment is 192.168.2.1

650) this.width=650; "title=" clip_image016 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstoptyovyaadw7hnbqfo274.jpg "" 289 "height=" 393 "/>

650) this.width=650; "title=" clip_image018 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstobx65hgaadgcmt4gyi305.jpg "" 294 "height=" 390 "/>

Configure Ha

Ha dual-Machine hot standby configuration prerequisite is that the nsip of two devices can access each other and enter the following menu:

650) this.width=650; "title=" clip_image020 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rstoitdgx9aadnatoxqms824.jpg "" 557 "height=" "the"/>

The default NetScaler adds itself as a node to Ha, simply by adding another device as a different node to ha, and

650) this.width=650; "title=" clip_image022 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image022 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstorraqsraacqfxnzrlc840.jpg "" 293 "height=" 238 "/>

It is important to note that the ID must be different and the IP address must be NSIP.

After you have established ha, you need to disable the status of unused interfaces into the following menu:

650) this.width=650; "title=" clip_image024 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image024 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstpcxc5ltaadfe3fl65g535.jpg "" 557 "height=" 234 "/>

Click on an interface and click the Disable button below to set the status of this interface to disable.

Then on the non-traffic interface to shut down the HA monitoring, double-click on a non-traffic interface,

650) this.width=650; "title=" clip_image026 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image026 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rstpscrvzoaaglyari9w0212.jpg "" 435 "height=" 580 "/>

Set the HA monitoring to OFF. The so-called traffic interface refers to the interface through which the data of a business flows. For example, the management interface does not belong to the traffic interface.

Configure the load Balance configuration servers

Add the IP address of the physical server,

650) this.width=650; "title=" clip_image028 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image028 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstpiqwebraacx0fdpqv4310.jpg "" 365 "height=" 225 "/>

Configure Services

Add apps, including protocols, application ports, and other information provided by which server.

650) this.width=650; "title=" clip_image030 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image030 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstios7qw4aaeanlp1vf8192.jpg "" 557 "height=" 393 "/>

Enter advanced to add the client IP to the header.

650) this.width=650; "title=" clip_image032 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image032 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/wKiom1RstIeA_ E8saafqci1bqac830.jpg "" 558 "height=" 376 "/>

Configure vSERVER

Add the vSERVER and add the related services to the vSERVER, and if you do only four levels of load balancing add the application port at the IP address where Vip,port is added.

650) this.width=650; "title=" clip_image034 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image034 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rstqgr4odvaafk4r9l9hc102.jpg "" 557 "height=" 388 "/>

If you need to do a seven-layer load, you will need to directly addressable place to remove

650) this.width=650; "title=" clip_image036 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image036 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstqwa9vf4aaf0onoccio112.jpg "" 557 "height=" 402 "/> into the method and persistence menu, set load Balancing mode and session hold mode, such as: Load mode is the minimum number of connections; Hold mode is cookie insert, time can be adjusted arbitrarily

650) this.width=650; "title=" clip_image038 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image038 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstjcgzw8taafmg9ngxna183.jpg "" 557 "height=" 397 "/>

Configure SSL Configuration Certificate

Import the requested root certificate and server certificate into NetScaler, and install both certificates.

Go to Ssl-sercificates and click Add. Click Browse, select a certificate, and create a root certificate without the need for a key.

650) this.width=650; "title=" clip_image040 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image040 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstjocks9paafpl1ldt1a752.jpg "" 554 "height=" 382 "/>

Certificate and key bindings are required when making a server certificate.

650) this.width=650; "title=" clip_image042 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image042 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/ Wkiom1rstjagivd1aafyww20kb8173.jpg "" 552 "height=" 382 "/>

Configuring CRLs

1. First enter the menu ssl-crl, then click Add, the following screen appears.

2. Then select the CRL file, which has been downloaded from CFCA's LDAP server and copied to NetScaler 3 in advance. In the/var/netscaler/ssl directory.

4. Format the certificate for the issuer of this CRL list for the DER,CA certificate.

5. Turn on automatic Update, mode is HTTP, port is 80,url absolute URL path to be written to download CRL, time interval is daily, update time is 3 point 50

Create the following as shown:

650) this.width=650; "title=" clip_image044 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image044 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstjih-bniaahjkg9ngju277.jpg "" 536 "height=" 535 "/>

After creation, the refresh status is displayed successfully and the usage status is displayed as available. Such as

650) this.width=650; "title=" clip_image046 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image046 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstroj36msaabl1i-e8ew895.jpg "" 557 "height=" 212 "/>

Use the command line to view the status of the CRL as follows:

650) this.width=650; "title=" clip_image048 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image048 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/wKiom1RstJ3Az_kSAACTf_ Eyl4u702.jpg "" 557 "height=" 107 "/>

Configuring SSL Offload

The server and service configured with SSL offload are the same as the load balance, and the server and service created in the load balance can be used in SSL offload, creating vSERVER directly, Enter the following menu,

650) this.width=650; "title=" clip_image050 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image050 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstkdxicszaafd93evy58431.jpg "" 557 "height=" 404 "/>

Then go to the SSL setting menu,

650) this.width=650; "title=" clip_image052 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image052 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/ Wkiom1rstkphnfqxaaeqkblqbqy756.jpg "" 557 "height=" 404 "/>

Here the server certificate directly add, CA certificate and root certificate need add as CA to be added,

650) this.width=650; "title=" clip_image054 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image054 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstkadkahzaafgcz6f01c495.jpg "" 557 "height=" 407 "/>

Sometimes users will need certificates for two-way authentication, this time need to click the expand SSL Parameters menu,

650) this.width=650; "title=" clip_image056 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image056 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstypdhbpoaafnxkcfxhy086.jpg "" 557 "height=" 420 "/>

Enable client authentication and select mandatory (mandatory) authentication

Configuring the Content Switch configuration CS Vserver

Create vSERVER, such as protocol for SSL, and configure VIP and port numbers. If it is just the HTTP protocol, you do not need to configure the SSL option.

650) this.width=650; "title=" clip_image058 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image058 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstyxd6o2caafdzfobrqe423.jpg "" 557 "height=" 368 "/>

The certificate that binds the creation number, the root certificate is added as a CA, and the server certificate is added directly

650) this.width=650; "title=" clip_image060 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image060 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstyazoqaraaeoqzosqj0632.jpg "" 557 "height=" 365 "/>

If you need to set up mandatory authentication for client certificates, in SSL parameters

650) this.width=650; "title=" clip_image062 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image062 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rstyjdsx3aaafhp4hqote614.jpg "" 557 "height=" 375 "/>

Create the vSERVER of the HTTP protocol. The creation method is the same as the vSERVER that creates the SSL protocol, with the difference between protocol and port number,

650) this.width=650; "title=" clip_image064 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image064 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstrsxphelaafzp417tl8536.jpg "" 557 "height=" 369 "/>

Configure Policy

Add a policy, such as creating two of the domains based on the +url (directory),

First create the domain + directory policy

650) this.width=650; "title=" clip_image066 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image066 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/ Wkiom1rstrwjbhnpaac2whqtsd8114.jpg "" 558 "height="/>

Start a good name, click Configure

650) this.width=650; "title=" clip_image068 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image068 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rsty6ryqxoaadnbxe8o-8220.jpg "" 557 "height=" 335 "/>

Click Add to create a domain name for the expressions

650) this.width=650; "title=" clip_image070 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image070 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/ Wkiom1rstrnjqseoaaegy2zrxkc388.jpg "" 557 "height=" 369 "/>

Re-create a URL for the expressions

650) this.width=650; "title=" clip_image072 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image072 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstruhasvnaaew4cg2brg814.jpg "" 558 "height=" 379 "/>

Then set the match condition to match all expressions

650) this.width=650; "title=" clip_image074 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image074 "src=" http://s3.51cto.com/wyfs02/M01/53/A5/ Wkiol1rstztzmluqaaeab-w-4-8955.jpg "" 557 "height=" 336 "/>

then click Create.

Policy binding

Bind the created policy to CS vSERVER, and specify the target's load balance's vserver, and set the priority, the lower the priority value of the policy, the higher the priority,

Expand CS Vserver for the SSL protocol that you have created

650) this.width=650; "title=" clip_image076 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image076 "src=" Http://s3.51cto.com/wyfs02/M02/53/A7/wKiom1RstR-h_ Wsyaafw8j2gilu583.jpg "" 558 "height=" 362 "/>

Configuring the GSLB Configuration Adns server

Service in Load balance, add adns services,

650) this.width=650; "title=" clip_image078 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image078 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstshd5u2iaaell1-05ai276.jpg "" 557 "height=" 410 "/>

The ADNS uses the NetScaler interface address.

Configure the Site node

Create a local site,

650) this.width=650; "title=" clip_image080 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image080 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/wKiom1RstSOx8Y__ Aadl2bsujea774.jpg "" 322 "height=" 323 "/>

Local site to configure its own ADNS address.

Creating remote site is the same as creating a local site, except that the site type is remote and the site IP is the public address of the remote Adns.

650) this.width=650; "title=" clip_image082 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image082 "src=" Http://s3.51cto.com/wyfs02/M02/53/A7/wKiom1RstSjDYyx4AAC_fDa_ Jdm396.jpg "" 315 "height=" 328 "/>

Configuring GSLB Location

Configure location, the telecommunications and Netcom address segments are written to different locations, in the system to determine whether a user's local DNS address belongs to telecommunications to access or netcom, the first to find the location table. The function of this table is the basis of static proximity judgement.

Write a location text file in advance and upload it to the NetScaler/var/netscaler/locdb/directory, and then load the file in the Web interface.

Add in static database in Gslb-location

650) this.width=650; "title=" clip_image084 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image084 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/wKioL1RstaHxjd6_ Aaclovzzy8g540.jpg "" 557 "height=" 280 "/>

Configuring GSLB Service

Configure the local service to configure the vserver of two nodes into their respective service.

650) this.width=650; "title=" clip_image086 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image086 "src=" http://s3.51cto.com/wyfs02/M02/53/A5/ Wkiol1rstaxdiddqaahbp-x3rsi968.jpg "" 558 "height=" 592 "/>

On virtual server, select the vSERVER that you want to do gslb.

Configuring the remote service is the same as the local service, where the difference is that you need to pre-create a servers in loadbalance with a remote SERVER,IP address as remote vSERVER ip;site Name to select the server name in the name,virtual server for the remote sit to select the pre-created remote server.

Creating a remote server in LoadBalance

650) this.width=650; "title=" clip_image088 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image088 "src=" http://s3.51cto.com/wyfs02/M01/53/A7/wKiom1RstS_ Zfcfuaackuovsm_k615.jpg "" 363 "height=" 199 "/>

Create a remote service in GSLB

650) this.width=650; "title=" clip_image090 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image090 "src=" http://s3.51cto.com/wyfs02/M02/53/A7/ Wkiom1rsttpi7ycaaahgusbvtva996.jpg "" 558 "height=" 603 "/>

Configuring GSLB Vserver

Configure the GSLB Vserver, add the GSLB service to GSLB Vserver, the load Balancing algorithm is: Static proximity and dynamic proximity, when the static table location does not have the user's local DNS address, the use of dynamic proximity to determine which link users should go , and then configure the site to provide services to the domain name.

650) this.width=650; "title=" clip_image092 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image092 "src=" http://s3.51cto.com/wyfs02/M00/53/A5/ Wkiol1rsta3d5hoyaaem4ne6bua270.jpg "" 557 "height=" 398 "/>

The protocol chooses SSL and joins the established service to the GSLB vSERVER.

Then configure the domain name, click Domains, Add,

650) this.width=650; "title=" clip_image094 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image094 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rstteqslyhaafaoqzyvyq007.jpg "" 558 "height=" 405 "/>

Then configure the GSLB vserver algorithm, using static on the first algorithm, dynamic into the second algorithm, when the first algorithm fails to enable the second algorithm,

650) this.width=650; "title=" clip_image096 "style=" border-top:0px; border-right:0px; border-bottom:0px; border-left:0px; Display:inline "border=" 0 "alt=" clip_image096 "src=" http://s3.51cto.com/wyfs02/M00/53/A7/ Wkiom1rsttnzbzcoaaea1ytm9lo980.jpg "" 558 "height=" 404 "/>

Features commonly used by CITRIX NETSCALER