Hi.
I just use the 'Use alternate address for firewall connection' in the Citrix
client and point it at the server's externally visible address (as well as
using the ALTADDR command on the server.) Works fine, enumerates published
applications no problem.
It's probably worth mentioning that MetaFrame 1.8 Feature Release 1 includes
an option to use TCP for ICA browsing. I think the public release date is
early September.
Also, you can specify the alternate address on a per *custom connection* by
manually editing APPSRV.INI although I just noticed the V6.00.910 client
supports this setting via the GUI (yay).
Cheers,
Dale
PS: I've never had to use 'ip helper-address x.x.x.x' and 'ip
forward-protocol udp' to make this work.
> -----Original Message-----
> From: Tom Casaer [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 30 August 2000 7:07 PM
> To: 'Steve Smith'; '[EMAIL PROTECTED]'
> Subject: RE: Citrix and NAT
>
>
> Hi,
>
> You need to open only port 1494 to access any citrix-server
> with a direct
> connection, also when you use NAT.
> Port 1604 is like you mention only for Published
> Applications. This is an
> UDP-port where the ica-browser listens on. You _only_ can use
> this when you
> forward the udp-packets to the Citrix server.
> How? Implement "ip helper-address x.x.x.x" (on the interface)
> (where x.x.x.x
> is your citrix-server)(you can configure this twice when you use
> load-balancing, so that will still work also) and "ip
> forward-protocol udp
> 1604" in the global config (This is for cisco)
> On a firewall you could create a rule that forwards the
> udp-packets to the
> right destination.
>
> You should be able to use NAT...
>
>
> regards,
> Tom
>
> -----Oorspronkelijk bericht-----
> Van: Steve Smith [mailto:[EMAIL PROTECTED]]
> Verzonden: woensdag 30 augustus 2000 4:49
> Aan: '[EMAIL PROTECTED]'
> Onderwerp: Citrix and NAT
>
>
> Hey guys and girls I have a problem I need help on.
>
> Supposedly you need to open ports 1604 and 1494 for Citrix clients to
> connect to you. Now, there seems to be some kind of problem
> with the Citrix
> browser if you use any type of NAT. I am being told that you
> have to have
> public IPs on each servers NIC because if you use any type of
> proxy or NAT
> than the Citrix master browser won't work. Has anyone had any
> experience
> with this. This seems to effect only published apps. PLEASE
> PLEASE PLEASE
> help me clear this up.
>
> Thanks in advance,
> Steve
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
