Citrix NetScaler EE, Installation And Configuration Manual

Page: 693 / 1026

© 1999-2017 Citrix Systems, Inc. All rights reserved. p.693 https://docs.citrix.com
Evaluating the Configuration
Aug 14, 2013
Putting your appliance online in a production network requires special attention to prevent disruption or confusion,
especially in a complex environment
When deploying SD-WAN 4000/5000, the basic rollout decision is whether to activate the entire deployment at once or to
roll it out in stages. In a large or complex environment, a phased approach avoids trouble, and the deployment can be
extended at will. This type of approach calls for the use of WCCP. The following example illustrates one approach for such
a site:
1. Configure the system as described in the installation procedure, except for the router. There, instead of setting up
WCCP redirection for all incoming and outgoing WAN traffic, set it up for traffic to and from either a single remote site
or a single IP address at that site. The remote site must already contain an enabled SD-WAN appliance.
2. The accelerator page. If not, check your WCCP configuration on the router and on the accelerators, and check your
NAT definitions on the NetScaler instance by using Monit oring: WCCP Monit oring: WCCP page. If not, check your WCCP configuration on
the router and on the accelerators, and check your NAT definitions on the NetScaler instance by using nst race nst race. If
nst race nst race reveals an issue, and your definitions look correct, rebooting the appliance may resolve the issue.
3. Test acceleration between the new site and the remote site, with the remote site as the client side and the SD-WAN
4000/5000 equipped site as the server side, as described in General Monitoring .
4. If traffic does not appear, the router is not sending traffic to the SD-WAN 4000/5000 properly. The error could be in the
Router configuration, the NetScaler configuration, or the SD-WAN WCCP configuration. Double-check these settings.
5. If traffic appears but is not accelerated, you might have a problem with asymmetrical routing, with not having a SD-WAN
license installed, or with having acceleration disabled either globally or on the service classes associated with the traffic.
6. When all is working properly, test reverse connections, where a site on the SD-WAN 4000/5000 side is the client and the
remote site is the server, if applicable.
7. If using NetScaler HA, save the configuration of the individual WCCP-enabled instances from the individual instances'
GUIs, and save the configuration of the accelerator, do basic configuration manually, then restore the saved
configurations, first of the accelerators as a whole, and then restore the two WCCP-enabled instances. Once this is
done (and NetScaler HA is enabled), test failover by powering down the primary appliance. Be careful to avoid IP address
conflicts.SD-WAN 4000/5000, do basic configuration manually, then restore the saved configurations, first of the
accelerators as a whole, and then restore the two WCCP-enabled instances. Once this is done (and NetScaler HA is
enabled), test failover by powering down the primary appliance. Be careful to avoid IP address conflicts.
8. If using NetScaler HA, save the configuration of the individual WCCP-enabled instances from the individual instances'
GUIs, and save the configuration of the accelerator, restore these saved configurations, first of the accelerators as a
whole, and then restore the two WCCP-enabled instances. Once this is done (and NetScaler HA is enabled), test failover
by powering down the primary appliance.SD-WAN 4000/5000, restore these saved configurations, first of the
accelerators as a whole, and then restore the two WCCP-enabled instances. Once this is done (and NetScaler HA is
enabled), test failover by powering down the primary appliance.
9. Expand the scope of acceleration to include more remote sites, and repeat the above testing. When doing so, also
examine the Monit oring: Syst em Load Monit oring: Syst em Load page, especially during peak periods, to verify that the SD-WAN 4000/5000 is
not heavily loaded.
10. Continue this process until the entire WAN is being accelerated.