Citrix NetScaler EE, Руководство по установке и настройке

Страница: 1019 / 1026

© 1999-2017 Citrix Systems, Inc. All rights reserved. p.1019 https://docs.citrix.com
registers with the MCN and the MCN communicates the presence of this appliance with the Zero Touch Service in the
cloud for consistency and visibility into the fact that the appliance is now on the Enterprise Domain.
2. Branch appliance needs a working internet connection plugged in.
3. Branch appliance needs to have internet connectivity set up with an IP address assigned to it, either using DHCP or
manually.
a. If the branch appliance was pre-staged and deployed and configured with software package associated with it,
which contains the details of the MCN, then the normal process of joining the SD-WAN/Enterprise zone follows including
obtaining an IP address for the appliance through DHCP, or if one is provided manually.
b. However, if the branch appliance does not have a pre-staged software package and configuration, and if DHCP
is available to obtain an IP address, then the branch appliance obtains an IP address for itself and also scans for the ZTD
service IP address within the DHCP options field. If none is found using the DHCP options field then proceed with the step
below.
c. Optional: Assuming that the appliance now has IP address assigned either manually or using DHCP, the branch
appliance should query a well-known, local, fully qualified domain name (FQDN). For example; ztd <enterprise domain>, use
Citrix as an example
ztd.citrite.net – The enterprise domain name itself ( citrate.net ) can be obtained by the branch
appliance through DHCP. The complete well known enterprise domain name and the IP address the appliance resolves
should be a pre-configured DNS entry that is set up by the Network/DNS Administrator beforehand. The IP address that is
resolved should be the IP address of a private zero touch server that the branch appliance can then connect to.
d. If the appliance fails to obtain a zero touch service IP address with the DHCP options field or by querying the
well-known FQDN entry, then the appliance should query the DNS entry for the public cloud based zero touch deployment
service (eg: ztd.citrix.com). This public cloud based zero touch IP address or DNS entry must be known to the appliance
(exists in the appliance code) as part of the start-up procedure.
Once the appliance connects to the zero touch service requesting direction and approval to connect to the SD-
WAN/Enterprise zone, the next step is performed through the Web Management Interface, as shown below. This
interaction requires the use of a Citrix signed certificate in order for the ZTD service to authenticate the newly connected
appliance (i.e. to ensure that the appliance connecting is a Citrix appliance and is based on the serial number obtained as
part of the request).