MPSVPX 配置

MPSVPX 配置

设置主机名，IP地址，掩码，网关，DNS服务器，时区(使用WebGUI界面设置)。

bash-2.05b# cat svm.conf
arp -d -a
route flush
ifconfig 0/1 192.168.195.95 netmask 255.255.255.0
ifconfig 1/1 192.168.1.95 netmask 255.255.255.0
ifconfig 1/2 10.0.100.95 netmask 255.255.255.0
ifconfig 1/3 192.168.185.95 netmask 255.255.255.0
route add default 192.168.195.2
route add -net 192.168.195.0/24 192.168.195.2
route add -net 192.168.1.0/24 192.168.1.1
route add -net 10.0.100.0/24 10.0.100.1
route add -net 192.168.185.0/24 192.168.185.201
route add -net 10.0.0.0/24 10.0.100.1
route add -net 10.0.12.0/24 10.0.100.1
route add -net 10.0.13.0/24 10.0.100.1
route add -net 10.0.14.0/24 10.0.100.1
route add -net 192.168.30.0/24 10.0.100.1
route add -net 192.168.10.0/24 10.0.100.1
route add -net 192.168.20.0/24 10.0.100.1
route add -net 192.168.11.0/24 10.0.100.1
route add -net 192.168.21.0/24 10.0.100.1
/mps/changenameserver.sh 8.8.8.8
/mps/changehostname.sh mpsvpx

查看路由表
# netstat -nr

路由的属性标志和它们的含义的一个简表：
U     Up: 路由处于活动状态。
H     Host: 路由目标是单个主机。
G     Gateway: 所有发到目的地的网络传到这一远程系统上， 并由它决定最后发到哪里。
S     Static: 这个路由是手工配置的，不是由系统自动生成的。
C     Clone: 生成一个新的路由， 通过这个路由我们可以连接上这些机子。 这种类型的路由通常用于本地网络。
W     WasCloned: 指明一个路由——它是基于本地区域网络 (克隆) 路由自动配置的。
L     Link: 路由涉及到了以太网硬件。

如何使用CLI重新启动或关闭NetScaler MAS
https://support.citrix.com/article/CTX220000

在MAS的命令提示符下运行此命令以干净的方式重新启动它：
shutdown -r now

要关闭MAS，请使用以下命令：
shutdown -p now

如何在Netscaler MAS上添加静态路由
https://support.citrix.com/article/CTX223282

要添加静态路由，您需要修改系统路由表。要使更改成为永久更改，需要编辑svm.conf文件。
使用SSH客户端登录NetScaler MAS。
使用以下命令制作文件/mpsconfig/svm.conf的备份副本：
cd / mpsconfig / cp svm.conf svm.conf.bak

使用以下命令将以下行添加到上面的文件"route add -net 10.20.30.0/28 10.0.0.1":
echo "route add -net 10.20.30.0/28 10.0.0.1" >> svm.conf

使用以下命令重新启动设备：
重启命令 shutdown -r now
关机命令 shutdown -p now

验证系统路由表中是否存在静态路由：
netstat -rn

请注意，网关地址（在我们的例子中是10.0.0.1）必须位于其中一个接口子网中。否则路由将不会被添加，您将收到以下消息：
route: writing to routing socket: Network is unreachable
add net 10.20.30.0: gateway 10.0.0.1: Network is unreachable

NetScaler MAS 操作配置参考：
http://www.carlstalhood.com/netscaler-management-and-analytics-system-mas-12/
http://www.jgspiers.com/citrix-netscaler-management-analytics-system/

Allocating VPX Licenses to a NetScaler VPX Instance by using the NetScaler CLI

1. In a SSH client, enter the IP address of the NetScaler instance, and log on by using administrator credentials.

2. To add a licensing server, enter the following command:
add ns licenseserver (\<licenseServerIP\> | \<serverName\>) \[-port \<port number \>\]

3. To show the available licenses on the licensing server, enter the following command:
sh licenseserverpool

4. To assign a license to the NetScaler VPX appliance, enter the following command:
set capacity –platform V\[S/E/P\]\[Bandwidth\]

> show version
	NetScaler NS12.0: Build 56.20.nc, Date: Dec 19 2017, 06:00:47
 Done
>
> show hardware
	Platform: Netscaler Remote Licensed Virtual Appliance 450010
	Manufactured on: 9/30/2009
	CPU: 3192MHZ
	Host Id: 000c294ffa77
	Serial no: HE2H81UJ47
	Encoded serial no: 891e0000cb254307ee9a
 Done
>
> shell
Copyright (c) 1992-2013 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.

root@ns-vpx#
root@ns-vpx# ls /flash/nsconfig/license/
.absconfdb.HKLM.db			Trial.lic				xml
.pooledLicense_nslped_ns-vpx.ini	ssl
root@ns-vpx#
root@ns-vpx# cat /flash/nsconfig/license/Trial.lic
#DO NOT EDIT THIS LINE - This File is in UTF-8 format.
#
root@ns-vpx#
root@ns-vpx# 

Clear MAS Configuration

If you ever need to wipe the configuration on a MAS appliance run the following commands on the appliance via CLI:

1. shell
2. masd stop
3. killall postgres
4. sh /mps/scripts/pgsql/deleteuser.sh
5. sh /mps/scripts/pgsql/createuser.sh
6. chown -R mpspostgres /var/mps/db_pgsql/
7. rm -rf /var/mps/db_pgsql/data
8. su -l mpspostgres -c “sh /mps/scripts/pgsql/initpgsql.sh”
9. cp -f /mps/postgresql.conf /var/mps/db_pgsql/data/
10. su -l mpspostgres -c “sh /mps/scripts/pgsql/startpgsql.sh”
11. su -l mpspostgres -c “sh /mps/scripts/pgsql/drop_pgsql_db.sh”
12. su -l mpspostgres -c “sh /mps/scripts/pgsql/create_pgsql_db.sh”
13. su -l mpspostgres -c “sh /mps/scripts/pgsql/drop_pgsql_user_sh”
14. su -l mpspostgres -c “sh /mps/scripts/pgsql/create_pgsql_user_sh”
15. su -l mpspostgres -c “sh /mps/scripts/pgsql/stoppgsql.sh”
16. touch /mpsconfig/.recover
17. masd start

If you want to run the deployment selection/change the deployment, run shell -> deployment_type.py

Troubleshooting Netscaler MAS

NetScaler MAS Troubleshooting Guide – https://support.citrix.com/article/CTX224502

This document should still apply largely to MAS http://docs.citrix.com/en-us/netscaler-insight/11-0/ni-troubleshoot-tips-ref.html

Also read the HDX Insight Diagnostics and Troubleshooting Guide – https://support.citrix.com/article/CTX215130

Your NMAS version must be the same or higher than your NetScaler firmware version.

When you have enabled AppFlow against your NetScaler Gateway or Load Balanced vServer etc. and you can not see any Insight traffic, make sure firewall rules are in place to allow UDP 4739 from NetScaler NSIP to NMAS IP. You can check if MAS is receiving any appflow traffic by performing the following steps:

Launch PuTTY, and connect to your NetScaler Insight Center IP.

Type shell. Press enter.

Type command tcpdump -i 1 src NSIP and dst port 4739 where NSIP = your NetScaler IP.

If you still do not see NetScaler AppFlow data, connect to your NetScaler appliance with PuTTy.

Run command disable feature appflow followed by enable feature appflow.

Review the MAS putty screen to see if traffic is appearing. If not, review firewall configuration.

Example output showing AppFlow traffic between NetScaler MAS and NetScaler VPX.

================== End