Translated ip addresses clients and metaframe XP

[Moien]

Hello,

I have a farm with windows 2000 sp4 and citrix mf xp sp3/fr3 installed.
I'm trying to connect several external clients (behind firewalls). Those clients use, each of them, their own ip addressing(for ex:192.168.200.0, 10.10.200.0,...).
To be able to allow connections, I used the altaddr command to set one local ip with one translated address and set multiple ip addresses on one nic on each server.
I have a lot of problem as some users receives translated ip addresses which supposed to be used by other clients and, of course, the session failed.
As I cannot add one nic for each client, is anybody has an idea?
I thought to use multiple ports nic's but before buy them, I would like to have your sugestions...
Many thanks,

Moien

NB:I tried Citrix Web Access but still the same...

 

[ThinIsFat]

The best way is to use Web Interface (included in MF XP CD)
When properly designed, it will work fine without the need to have alternate address in some case.

Are those external machines trying to access your MF XP farm from Internet ?

What you want to achieve is described in the Citrix Knowledge Base (

http://support.citrix.com)

CTX584485

 

[Ogi]

Hi,

Have you set routes for any external client to your external router?

I've got an internal network and an "extranet" network and have to ensure that on a new server, place a permanent route so that the server knows how to use the alt address and attach to that network.

Cheers,
Carl.

 

[Moien]

Thanks you all,

but the document CTX584485 do reference to a SINGLE external ip address.
I have, for the moment, FOUR external sites with their own ip addressing.
I used the netmon to check what was in the tcp packets when clients tried to connect. The server was returning an ip address setup for another client. So, it was a mess.
Basically, I have setup 4 differents ip addresses on the same nic, use altaddr to set one external ip for each internal ip.
So, the question is : is it possible to do this functional like that or must I use another configuration?

Regards

 

[xs4citrix]

You can only use 1 altaddr adres per nic.
If you need multiple, you will need the same amount of nics, and things get very complex.
The most easy solution, is to use CSG for this, and use routing to make all the clients find the CSG adres.

Stefan

http://www.printingsupport.com

 

[Moien]

Hi xs4citrix,

could you explain a little more your answer as I've never used csg.

Thanks

 

[xs4citrix]

A CSG is a gateway tunnel between cirix servers running on lan ip's and the internet.
The CSG is the only machine that needs a public ip.
More info on CSG:

http://www.dabcc.com/thinsol/CSG/default.htm

Stefan

http://www.printingsupport.com

 

[Frankenherder]

Can you clarify your original post?

I have no idea why you want 1 NIC per IP address.
How many servers do you have?
Is this a Wan environment?
Are your remote users coming in through the internet?
Do you have a firewall?

Matt

 

[Moien]

Hello Frankenherder,

here is the situation :

I have two servers in load balancing with win2k sp4 and mf xp fr3/sp3.
It is a wan and user are accessing the servers trough leased lines (not internet). There isn't one firewall but, at least, two and clients are on different and well separated networks.
The problem I have is that those clients must use their own ip adressing.
As I cannot use different nic for each network, the question is "How can I configure my servers to use all features of mf?"
I'm going to try another stuff : I will use a nic supporting IEEE 802.1.p (VLAN) and configure one vlan by network.
I have a limited budget so I cannot by other servers. I must find a solution with what I have.
If you have another idea, please let me know...

Regards

 

[Frankenherder]

I assume then you have routers in your WAN?
Can't you set a rule that 10.X.X.X:80 and 10.X.X.X:1494 resolves to 10.1.X.X:80 and 10.1.X.X:1494?

This has worked for me in the past. I am not a router God but my clients infrastructure team new how to do it.

Once you get your routers configured, with all your subnets, everything should work fine.

Matt