Citrix NetScaler EE, Installation And Configuration Manual

Page: 283 / 1026

© 1999-2017 Citrix Systems, Inc. All rights reserved. p.283 https://docs.citrix.com
How to Create Rules
Jan 06, 2017
Using the configuration editor, you can create rules for traffic flow and associate the rules with applications and classes.
You can specify criteria to filter traffic for a flow, and can apply general behavior, LAN to WAN behavior, WAN to LAN
behavior, and packet inspection rules.
To create rules:
1. In the Configuration Editor, navigate to Def ault Set Def ault Set > Virt ual Pat h Def ault Virt ual Pat h Def ault
Set Set > New_Virt ual_Pat h_Def ault _Set s New_Virt ual_Pat h_Def ault _Set s > Rules Rules and click the plus (++ ) icon to add a new custom rule.
2. In the Order Order field, enter the order value to define when the rule is applied in relation to other rules.
3. In the Applicat ion Applicat ion field, select an application. The statistics for rules with the same application name will be grouped
together as a rule group and can be viewed together.
For viewing rule groups, navigate to Monit oring Monit oring > St at ist ics St at ist ics, and in the Show Show field select Rule Groups Rule Groups.
You can also add custom applications. For more information, see How to add Custom Applications and Enable MOS .
4. In the Rout ing Domain Rout ing Domain field, choose one of the configured routing domains.
5. You can define rule matching criteria to filter services on the basis of the parameters listed below. After the filtering,
the rule settings are applied to the services matching these criteria.
* Source IP Address Source IP Address: Source IP address and the subnet mask to match against the traffic.
* Dest inat ion IP Address Dest inat ion IP Address: Destination IP address and the subnet mask to match against the traffic.
Note
Select Des t Des t=Src Src , if the source and destination IP address are the same.
* Prot ocol Prot ocol: Protocol to match against the traffic.
* Source Port Source Port : Source port number or port range to match against the traffic.
* Dest inat ion Port Dest inat ion Port : Destination port number or port range to match against the traffic.
* DSCP DSCP : The DSCP DSCP tag in the IP header to match against the traffic.
* VLAN VLAN: The VLAN ID VLAN ID to match against the traffic.