Home > Configuration > Network |
| Network |
networking commands. |
Configuration APIs |
Use this method to adds a static ARP entry to the ARP table of the Citrix ADC. |
Use this method to create a Bridge group. |
Use this method to add static mac-vtep mappings per vxlan |
Use this method to creates a link aggregate channel on the Citrix ADC or on a cluster configuration. Link aggregation combines data coming from multiple ports into a single high-speed link. Configuring link aggregation increases the capacity and availability of the communication channel between the Citrix ADC appliance and other connected devices. When a network interface is bound to a channel, the channel parameters have precedence over the network interface parameters. That is, the network interface parameters are ignored. A network interface can be bound only to one channel. |
Use this method to adds a failover interface set (FIS) to the Citrix ADC. A FIS is a logical group of interfaces. In an HA configuration, using a FIS is a way to prevent failover by grouping interfaces so that, when one interface fails, other functioning interfaces are still available. A FIS can also be configured for the nodes of a Citrix ADC cluster. |
Use this method to adds a forwarding session rule, which creates forwarding-session entries for traffic that originates from or is destined for a particular network and is forwarded by the Citrix ADC. By default, the appliance does not create session entries for traffic that only forwards (L3 mode). Add a forwarding session rule for a case in which a client request that the appliance forwards to a server results in a response that has to return by the same path |
Use this method to adds an INAT rule to the Citrix ADC. When a packet generated by a client matches the conditions specified in the INAT rule, the appliance translates the packet's public destination IP address to a private destination IP address and forwards the packet to the server at that address. |
Use this method to create an Interface Pair. Each Interface Pair or IFPAIR is identified by a IFID (integer from 1-255). |
Use this method to creates an IPv6 tunnel. An IP tunnel is a communication channel, using encapsulation technologies, between two networks that do not have a routing path. Every IP packet that is shared between the two networks is encapsulated within another packet and then sent through the tunnel. |
Use this method to creates an IP set to which you can bind subnet IP (SNIP) or mapped IP (MIP) addresses that have been configured on the Citrix ADC. |
Use this method to creates an IPv4 tunnel. An IP tunnel is a communication channel, using encapsulation technologies, between two networks that do not have a routing path. Every IP packet that is shared between the two networks is encapsulated within another packet and then sent through the tunnel. |
Use this method to adds a linkset to the Citrix ADC cluster. |
Use this method to add MAP-T Basic Mapping rule. |
Use this method to add MAP-T Default Mapping rule. |
Use this method to add MAP Domain. |
Use this method to configure a nat64 rule on the appliance. |
Use this method to adds a static entry to the ND6 table of the Citrix ADC. |
Use this method to add a network bridge. |
Use this method to creates a net profile. A net profile (or network profile) contains an IP address or an IP set. During communication with physical servers or peers, the Citrix ADC uses the addresses specified in the profile as the source IP address. |
Use this method to add a new on-link global prefix. |
Use this method to adds a Reverse Network Address Translation (RNAT) rule for IPv4 traffic. When an IPv4 packet generated by a servermatches the conditions specified in the RNAT rule, the appliance replaces the source IPv4 address of the IPv4 packet with a configured NAT IPv4 address before forwarding it to the destination. |
Use this method to adds a Reverse Network Address Translation (RNAT6) rule for IPv6 traffic. When an IPv6 packet generated by a server matches the conditions specified in the RNAT6 rule, the appliance replaces the source IPv6 address of the IPv6 packet with a configured NAT IPv6 address before forwarding it to the destination. |
Use this method to adds an IPv4 static route to the routing table of the Citrix ADC. |
Use this method to adds an IPv6 static route to the routing table of the Citrix ADC. |
Use this method to adds a VLAN to the Citrix ADC.The newVLAN is not active unless interfaces are bound to it. |
Use this method to adds a VMAC address to the Citrix ADC. A Virtual MAC address (VMAC) is a floating entity, shared by the nodes in an high availability, or active-active, or cluster setup |
Use this method to adds a VMAC6 address to the Citrix ADC. A Virtual MAC address (VMAC6) is a floating entity, shared by the nodes in a high availability, or active-active, or cluster setup. |
Use this method to adds a VXLAN to the Citrix ADC. |
Use this method to add a table that gives a vlan to vxlan mapping. |
A network address or addresses to be associated with the bridge group. You must add entries for these network addresses in the routing table before running this method. |
An integer that uniquely identifies the VLAN that you want to bind to this bridge group. |
Interfaces to be bound to the LA channel of a Citrix ADC or to the LA channel of a cluster configuration. In case of standalone or HA configuration, Maximum 16 interfaces can be bound to a channel. In case of Cluster configuration, Maximum 16 interfaces can be bound to a Node level channel and maximum 16 interafce from each node can be bound to a Cluster level channel. For an LA channel of a Citrix ADC, specify an interface in C/U notation (for example, 1/3). For an LA channel of a cluster configuration, specify an interface in N/C/U notation (for example, 2/1/3). where C can take one of the following values: * 0 - Indicates a management interface. * 1 - Indicates a 1 Gbps port. * 10 - Indicates a 10 Gbps port. * 40 - Indicates a 40 Gbps port. U is a unique integer for representing an interface in a particular port group. N is the ID of the node to which an interface belongs in a cluster configuration. Use spaces to separate multiple entries. This is mandatory parameter. |
Interface to be bound to the FIS, specified in slot/port notation (for example, 1/3). This is mandatory parameter. |
SNIP or MIP addresses, configured on the Citrix ADC, to be bound to the IP set. (If using the CLI, use spaces to separate multiple addresses.). This is mandatory parameter. |
The interfaces to be bound to the linkset. This is mandatory parameter. |
IPv4 NAT address range of Customer Edge (CE). This is mandatory parameter. |
Basic Mapping rule name. This is mandatory parameter. |
Onlink prefixes for RA messages. This is mandatory parameter. |
The subnet that needs to be extended. |
The name of the tunnel that needs to be a part of this network bridge. |
The VLAN that needs to be extended. |
When Natrule is configured and netprofile is bound to lb vserver, Citrix ADC will use the prefix of rewrite IP for outgoing packets if prefix of source IP of incoming packet matches with prefix of IP of natrule. This will take preference over USIP and USNIP configuration. ip_addr : IP for which prefix need to rewritten. netmask : Netmask for NatRule IP and RewriteIP. rewriteIp : Prefix for modified IP. |
When the source port range is configured and associated with the netprofile bound to a service group, Citrix ADC will choose a port from the range configured for connection establishment at the backend servers. |
One or more NATIP addresses to be bound to the RNAT rule. |
When the source port range is configured and associated with the RNAT rule, Citrix ADC will choose a port from the specified source port range configured for connection establishment at the backend servers. |
One or more IP addresses to be bound to the IP set. This is mandatory parameter. |
The owner node group in a Cluster for this rnat rule. NOTE: This attribute is deprecated. This is depricated as ownerGroup is not needed when binding |
Name of the policy getting bound to the RNAT globally. This policy will apply to all the RNATS present |
Interface to be bound to the VLAN, specified in slot/port notation (for example, 1/3). |
Network address to be associated with the VLAN. Should exist on the appliance before you associate it with the VLAN. To enable IP forwarding among VLANs, the specified address can be used as the default gateway by the hosts in the network. |
The owner node group in a Cluster for this vlan. |
Interfaces to bind to the VMAC. Use spaces to separate multiple entries. For a Citrix ADC, specify the interface in C/U notation (for example, 1/3).For a cluster setup for configuring interface based VRRP, specify the interface in N/C/U notation (for example, 2/1/3) . where C can take one of the following values: * 0 - Indicates a mgmt port. * 1 - Indicates a 1 Gbps port. * 10 - Indicates a 10 Gbps port. Note: Interface based VRRP is only applicable to a two-node cluster where one of node is in active state and the other in Spare. You must associate the VRID to the interfaces of both the nodes of the active-spare cluster setup. This is because unlike in a high availability setup, interface ID differs in a cluster setup |
Interfaces which need to be tracked for this vrID. |
Interfaces to bind to the VMAC. Use spaces to separate multiple entries. For a Citrix ADC, specify the interface in C/U notation (for example, 1/3).For a cluster setup for configuring interface based VRRP, specify the interface in N/C/U notation(for example, 2/1/3) . where C can take one of the following values: * 0 - Indicates a mgmt port. * 1 - Indicates a 1 Gbps port. * 10 - Indicates a 10 Gbps port. Note: Interface based VRRP is only applicable to a two-node cluster where one of node is in active state and the other in Spare. You must associate the VRID to the interfaces of both the nodes of the active-spare cluster setup. This is because unlike in a high availability setup, interface ID differs in a cluster setup. |
Interfaces which need to be tracked for this vrID. |
The source IP address to use in outgoing vxlan packets. |
The VXLAN assigned to the vlan inside the cloud. |
Use this method to remove entries from bridge table |
Use this method to resets the statistical counters of the specified interface. |
Use this method to removes all IPv6 neighbour discovery entries from the Citrix ADC. |
Use this method to removes an RNAT rule from the NetScaler appliance. NOTE: This method is deprecated. Command is Deprecated, Please use "rm rnat |
Use this method to removes an RNAT6 rule from the Citrix ADC. |
Use this method to removes routes of the specifiedtype(protocol) from the routing table of the Citrix ADC. |
Use this method to removes IPv6 routes of the specified type (protocol) from the routing table of the Citrix ADC. |
Use this method to disables the interface from transmitting and receiving packets. The link remains active and the peer network device is unaware that the interface has been disabled. In a High Availability configuration, an interface that has HA MON enabled and is not bound to any Failover Interface Set (FIS), is a critical interface. Disabling or failure of any critical interface triggers HA failover. Note: To view the status of an interface, use the show interface method. |
Use this method to enables the interface. If the link is active, it can transmit and receive packets. Note: To view the status of an interface, use the show interface method. |
Use this method to flush RNAT Session. |
Use this method to get the global parameters for APP ALG |
Use this method to get all the entries in the system's ARP table. |
Use this method to get the global setting of dynamically learned ARP entries. |
Use this method to get the configured bridge group. If a name is specified, only that particular bridge group information is displayed. Otherwise, all configured bridge groups are displayed. |
Use this method to get the bridge table entries and the configured time-out values for these entries. |
Use this method to get the settings of all LA channels or of the specified channel. To display the settings of all channels, run the method without any parameters. To display the settings of a particular channel, specify the ID of the channel. |
Use this method to get all the critical interfaces of the Citrix ADC. In a High Availability configuration, an interface that has HA MON enabled and is not bound to any FIS, is a critical interface. Failure of any critical interface triggers HA failover. |
Use this method to get the configured FISs. |
Use this method to get the settings of all forwarding session rules configured on the Citrix ADC, or of the specified forwarding session rule. |
Use this method to get all configured inbound NAT. |
Use this method to get the inat parameters. |
Use this method to get the settings of all interfaces or of the specified interface on the Citrix ADC. To display the settings of all interfaces, run the method without any parameters. To display the settings of a particular interface, specify the ID of the interface. |
Use this method to get the configured Interface Pairs. If id is specified, then only that particular IFPAIR information is displayed. If it is not specified, all configured IFPAIRs are displayed. |
Use this method to get the settings of all IPv6 tunnels configured on the Citrix ADC, or of the specified IPv6 tunnel. |
Use this method to get the global settings of IPv6 tunnels on the Citrix ADC. |
Use this method to get the settings of all IP sets configured on the Citrix ADC, or of the specified IP set. |
Use this method to get the configured IP tunnels. |
Use this method to get the IP Tunnel global settings on the Citrix ADC |
Use this method to get IPv6 settings |
Use this method to get the settings of global Layer 2 parameters on the Citrix ADC. |
Use this method to get the settings of global Layer 3 parameters. |
Use this method to get the settings of global Layer 4 parameters. |
Use this method to get the settings of all channels created by the link aggregation control protocol (LACP) on the Citrix ADC. |
Use this method to get information about all linksets, or displays information about the specified linkset. |
Use this method to get Basic mapping rule. |
Use this method to get MAP-T Default Mapping rule. |
Use this method to get MAP Domain. |
Use this method to get the nat64 configuration. |
Use this method to get the nat64 parameters. |
Use this method to get the neighbor discovery information. |
Use this method to get Router Advertisement configuration variables. |
Use this method to get configured network bridges. |
Use this method to get the settings of all net profiles configured on the Citrix ADC, or of the specified net profile. |
Use this method to get on-link global prefixes. |
Use this method to get the port allocation for IPs based on given inputs parameters |
Use this method to get the status of Precision Time Protocol (PTP) on the appliance. |
Use this method to get the Reverse NAT configuration. |
Use this method to get the settings of all RNAT6 rules configured on the Citrix ADC, or of the specified RNAT6 rule. |
Use this method to get the Reverse NAT configuration. |
Use this method to get the rnat parameter. |
Use this method to get the configured routing information. |
Use this method to get configuration and state information of all IPv6 routes in the Citrix ADC's routing table, or of the specified IPv6 route. |
Use this method to get the settings of all VLANs configured on the Citrix ADC, or of the specified VLAN. To display the settings of all the VLANs, run the method without any parameters. To display the settings of a particular VLAN, specify the ID of the VLAN. |
Use this method to get the settings of all VRIDs configured on the Citrix ADC, or of the specified VRID. To display the settings of all the VRIDs, run the method without any parameters. To display the settings of a particular VRID, specify the VRID. |
Use this method to get the settings of all VRID6s configured on the Citrix ADC, or of the specified VRID6. To display the settings of all the VRID6s, run the method without any parameters. To display the settings of a particular VRID6, specify the VRID6. |
Use this method to get the VRID global settings on the Citrix ADC. |
Use this method to get all the VXLANs on the Citrix ADC |
Use this method to get vlan to vxlan mappings. |
Use this method to renames an RNAT rule. |
Use this method to restarts the interface but leaves the administrative state ENABLED or DISABLED and configuration unchanged. The link pertaining to the interface is reestablished with the existing settings. |
Use this method to removes a specified static ARP entry or all static ARP entries from the Citrix ADC's ARP table. |
Use this method to remove the bridge group created by the add bridge group method. |
Use this method to delete static mac-vtep mapping |
Use this method to removes an LA channel from the Citrix ADC or a cluster LA channel from a cluster configuration. Important: When a LA channel is removed, the network interfaces bound to it induce network loops that decrease network performance. You must disable the network interfaces before you remove the channel. |
Use this method to removes an FIS from the Citrix ADC. When an FIS is removed, its interfaces are marked as critical interfaces. |
Use this method to removes a forwarding session rule from the Citrix ADC. |
Use this method to remove the specified Inbound NAT configuration. |
Use this method to removes the IFPAIR created by the add intfPair method. Once the IFPAIR is removed, its interfaces become independent. |
Use this method to removes an IPv6 tunnel from the Citrix ADC. |
Use this method to removes an IP set from the Citrix ADC. |
Use this method to removes an IP tunnel configuration from the Citrix ADC. |
Use this method to removes a linkset from the cluster. |
Use this method to remove MAP Basic Mapping Rule. |
Use this method to remove MAP-T Default Mapping rule. |
Use this method to remove MAP Domain. |
Use this method to remove the configured nat64 rule. |
Use this method to remove a static IPv6 neighbor discovery entry from the Citrix ADC's ND6 table. |
Use this method to remove a network bridge. |
Use this method to removes a net profile from the Citrix ADC. |
Use this method to remove an existing on-link global prefix. |
Use this method to remove the specified RNAT rule. |
Use this method to removes a static route from the Citrix ADC. Note: You cannot use this method to remove routes that are part of a VLAN configuration. Use the rmvlan or clear vlan method instead. |
Use this method to removes a static IPv6 route from the Citrix ADC. |
Use this method to removes a VLAN from the Citrix ADC. When the VLAN is removed, its interfaces are bound to VLAN 1. Note: VLAN 1 cannot be removed by any method. |
Use this method to removes a specified VMAC entry or all VMAC entries from the Citrix ADC. |
Use this method to removes a specified VMAC6 entry or all VMAC6 entries from the Citrix ADC. |
Use this method to removes a VXLAN from the Citrix ADC |
Use this method to delete the vlan to vxlan mapping table. |
Use this method to sends Gratuitous Address Resolution Protocol (GARP) messages for the specified Citrix ADC owned IP addresses. |
Use this method to set interval in sec, after which data sessions of PPTP GRE is cleared. |
Use this method to set enable/disable arp spoofing validation |
Use this method to set time-out value (aging time) for the dynamically learned ARP entries, in seconds. The new value applies only to ARP entries that are dynamically learned after the new value is set. Previously existing ARP entries expire after the previously configured aging time. |
Use this method to set enable dynamic routing for this bridgegroup. |
Use this method to set enable all IPv6 dynamic routing protocols on this bridge group. For this setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. For more information about configuring IPv6 dynamic routing protocols on the Citrix ADC, see the Dynamic Routing chapter of the Citrix ADC Networking Guide. |
Use this method to set time-out value for the bridge table entries, in seconds. The new value applies only to the entries that are dynamically learned after the new value is set. Previously existing bridge table entries expire after the previously configured time-out value. NOTE: This attribute is deprecated. This attribute is moved to set l2Param -bridgeAgeTimeout |
Use this method to set high threshold value for the bandwidth usage of the LA channel, in Mbps. The Citrix ADC generates an SNMP trap message when the bandwidth usage of the LA channel is greater than or equal to the specified high threshold value. |
Use this method to set the 'connection' distribution mode for the LA channel. NOTE: This attribute is deprecated. Depreicating, as it is a NO-OP |
Use this method to set required flow control for the LA channel. |
Use this method to set the state of HA HEARTBEAT SEND config for the LA channel. |
Use this method to set the state of HA monitoring for the LA channel. |
Use this method to set the alias name for the interface. |
Use this method to set allows User to set MAC address for LA channels on Hypervised platforms. |
Use this method to set link Redundancy for Cluster LAG. |
Use this method to set specifies the minimum throughput threshold (in Mbps) to be met by the active subchannel. Setting this parameter automatically divides an LACP channel into logical subchannels, with one subchannel active and the others in standby mode. When the maximum supported throughput of the active channel falls below the lrMinThroughput value, link failover occurs and a standby subchannel becomes active. |
Use this method to set the 'MAC' distribution mode for the LA channel. NOTE: This attribute is deprecated. Depricating, as it is a NO-OP |
Use this method to set the mode for the LA channel. NOTE: This attribute is deprecated. Depricating, as user should not be able to set mode. Its value is decided based on the type of channel. |
Use this method to set the Maximum Transmission Unit (MTU) is the largest packet size, measured in bytes excluding 14 bytes ethernet header and 4 bytes CRC, that can be transmitted and received by an interface. The default value of MTU is 1500 on all the interface of Citrix ADC, some Cloud Platforms will restrict Citrix ADC to use the lesser default value. Any MTU value more than 1500 is called Jumbo MTU and will make the interface as jumbo enabled. The Maximum Jumbo MTU in Citrix ADC is 9216, however, some Virtualized / Cloud Platforms will have lesser Maximum Jumbo MTU Value (9000). In the case of Cluster, the Backplane interface requires an MTU value of 78 bytes more than the Max MTU configured on any other Data-Plane Interface. When the Data plane interfaces are all at default 1500 MTU, Cluster Back Plane will be automatically set to 1578 (1500 + 78) MTU. If a Backplane interface is reset to Data Plane Interface, then the 1578 MTU will be automatically reset to the default MTU of 1500(or whatever lesser default value). If any data plane interface of a Cluster is configured with a Jumbo MTU ( > 1500), then all backplane interfaces require to be configured with a minimum MTU of 'Highest Data Plane MTU in the Cluster + 78'. That makes the maximum Jumbo MTU for any Data-Plane Interface in a Cluster System to be '9138 (9216 - 78)., where 9216 is the maximum Jumbo MTU. On certain Virtualized / Cloud Platforms, the maximum possible MTU is restricted to a lesser value, Similar calculation can be applied, Maximum Data Plane MTU in Cluster = (Maximum possible MTU - 78). |
Use this method to set the speed for the LA channel. |
Use this method to set enable or disable the LA channel. |
Use this method to set the appliance adds a four-byte 802.1q tag to every packet sent on this channel. ON applies tags for all the VLANs that are bound to this channel. OFF, applies the tag for all VLANs other than the native VLAN. |
Use this method to set low threshold value for the throughput of the LA channel, in Mbps. In an high availability (HA) configuration, failover is triggered when the LA channel has HA MON enabled and the throughput is below the specified threshold. |
Use this method to set this is deprecated by tagall. NOTE: This attribute is deprecated. The "trunk" argument is confused with LA-trunk, renaming this to "tagall" instead. |
Use this method to set name of any configured ACL6 whose action is ALLOW. The rule of the ACL6 is used as a forwarding session rule. |
Use this method to set name of any configured ACL whose action is ALLOW. The rule of the ACL is used as a forwarding session rule. |
Use this method to set synchronize connection information with the secondary appliance in a high availability (HA) pair. That is, synchronize all connection-related information for the forwarding session. |
Use this method to set enabling this option on forwarding session will not steer the packet to flow processor. Instead, packet will be routed. |
Use this method to set cache the source ip address and mac address of the DA servers. |
Use this method to set synchronize connection information with the secondary appliance in a high availability (HA) pair. That is, synchronize all connection-related information for the INAT session |
Use this method to set enable the FTP protocol on the server for transferring files between the client and the server. |
Use this method to set stateless translation. |
Use this method to set iP address of the server to which the packet is sent by the Citrix ADC. Can be an IPv4 or IPv6 address. |
Use this method to set a unique IP address used as the source IP address in packets sent to the server. Must be a MIP or SNIP address. |
Use this method to set enable TCP proxy, which enables the Citrix ADC to optimize the RNAT TCP traffic by using Layer 4 features. |
Use this method to set to enable/disable TFTP (Default DISABLED). |
Use this method to set enable the Citrix ADC to proxy the source port of packets before sending the packets to the server. |
Use this method to set enable the Citrix ADC to retain the source IP address of packets before sending the packets to the server. |
Use this method to set enable the Citrix ADC to use a SNIP address as the source IP address of packets before sending the packets to the server. |
Use this method to set when disabled, translator will not insert IPv6 fragmentation header for non fragmented IPv4 packets |
Use this method to set ignore TOS. |
Use this method to set mTU setting for the IPv6 side. If the incoming IPv4 packet greater than this, either fragment or send icmp need fragmentation error. |
Use this method to set the prefix used for translating packets received from private IPv6 servers into IPv4 packets. This prefix has a length of 96 bits (128-32 = 96). The IPv6 servers embed the destination IP address of the IPv4 servers or hosts in the last 32 bits of the destination IP address field of the IPv6 packets. The first 96 bits of the destination IP address field are set as the IPv6 NAT prefix. IPv6 packets addressed to this prefix have to be routed to the Citrix ADC to ensure that the IPv6-IPv4 translation is done by the appliance. |
Use this method to set calculate checksum for UDP packets with zero checksum |
Use this method to set auto-negotiation state of the interface. With the ENABLED setting, the Citrix ADC auto-negotiates the speed and duplex settings with the peer network device on the link. The Citrix ADC appliance auto-negotiates the settings of only those parameters (speed or duplex mode) for which the value is set as AUTO. |
Use this method to set high threshold value for the bandwidth usage of the interface, in Mbps. The Citrix ADC generates an SNMP trap message when the bandwidth usage of the interface is greater than or equal to the specified high threshold value. |
Use this method to set the duplex mode for the interface. Notes:* If you set the duplex mode to AUTO, the Citrix ADC attempts to auto-negotiate the duplex mode of the interface when it is UP. You must enable auto negotiation on the interface. If you set a duplex mode other than AUTO, you must specify the same duplex mode for the peer network device. Mismatched speed and duplex settings between the peer devices of a link lead to link errors, packet loss, and other errors. |
Use this method to set 802.3x flow control setting for the interface. The 802.3x specification does not define flow control for 10 Mbps and 100 Mbps speeds, but if a Gigabit Ethernet interface operates at those speeds, the flow control settings can be applied. The flow control setting that is finally applied to an interface depends on auto-negotiation. With the ON option, the peer negotiates the flow control, but the appliance then forces two-way flow control for the interface. |
Use this method to set in a High Availability (HA) or Cluster configuration, configure the interface for sending heartbeats. In an HA or Cluster configuration, an interface that has HA Heartbeat disabled should not send the heartbeats. |
Use this method to set in a High Availability (HA) configuration, monitor the interface for failure events. In an HA configuration, an interface that has HA MON enabled and is not bound to any Failover Interface Set (FIS), is a critical interface. Failure or disabling of any critical interface triggers HA failover. |
Use this method to set alias name for the interface. Used only to enhance readability. To perform any operations, you have to specify the interface ID. |
Use this method to set integer identifying the LACP LA channel to which the interface is to be bound. For an LA channel of the Citrix ADC, this digit specifies the variable x of an LA channel in LA/x notation, where x can range from 1 to 8. For example, if you specify 3 as the LACP key for an LA channel, the interface is bound to the LA channel LA/3. For an LA channel of a cluster configuration, this digit specifies the variable y of a cluster LA channel in CLA/(y-4) notation, where y can range from 5 to 8. For example, if you specify 6 as the LACP key for a cluster LA channel, the interface is bound to the cluster LA channel CLA/2. |
Use this method to set bind the interface to a LA channel created by the Link Aggregation control protocol (LACP). Available settings function as follows: * Active - The LA channel port of the Citrix ADC generates LACPDU messages on a regular basis, regardless of any need expressed by its peer device to receive them. * Passive - The LA channel port of the Citrix ADC does not transmit LACPDU messages unless the peer device port is in the active mode. That is, the port does not speak unless spoken to. * Disabled - Unbinds the interface from the LA channel. If this is the only interface in the LA channel, the LA channel is removed. |
Use this method to set lACP port priority, expressed as an integer. The lower the number, the higher the priority. The Citrix ADC limits the number of interfaces in an LA channel to sixteen. |
Use this method to set interval at which the Citrix ADC sends LACPDU messages to the peer device on the LA channel. Available settings function as follows: LONG - 30 seconds. SHORT - 1 second. |
Use this method to set type of entity (Citrix ADC or cluster configuration) for which to create the channel. |
Use this method to set link Redundancy for Cluster LAG. |
Use this method to set link Layer Discovery Protocol (LLDP) mode for an interface. The resultant LLDP mode of an interface depends on the LLDP mode configured at the global and the interface levels. |
Use this method to set lRSET port priority, expressed as an integer ranging from 1 to 1024. The highest priority is 1. The Citrix ADC limits the number of interfaces in an LRSET to 8. Within a LRSET the highest LR Priority Interface is considered as the first candidate for the Active interface, if the interface is UP. |
Use this method to set the Maximum Transmission Unit (MTU) is the largest packet size, measured in bytes excluding 14 bytes ethernet header and 4 bytes CRC, that can be transmitted and received by an interface. The default value of MTU is 1500 on all the interface of Citrix ADC, some Cloud Platforms will restrict Citrix ADC to use the lesser default value. Any MTU value more than 1500 is called Jumbo MTU and will make the interface as jumbo enabled. The Maximum Jumbo MTU in Citrix ADC is 9216, however, some Virtualized / Cloud Platforms will have lesser Maximum Jumbo MTU Value (9000). In the case of Cluster, the Backplane interface requires an MTU value of 78 bytes more than the Max MTU configured on any other Data-Plane Interface. When the Data plane interfaces are all at default 1500 MTU, Cluster Back Plane will be automatically set to 1578 (1500 + 78) MTU. If a Backplane interface is reset to Data Plane Interface, then the 1578 MTU will be automatically reset to the default MTU of 1500(or whatever lesser default value). If any data plane interface of a Cluster is configured with a Jumbo MTU ( > 1500), then all backplane interfaces require to be configured with a minimum MTU of 'Highest Data Plane MTU in the Cluster + 78'. That makes the maximum Jumbo MTU for any Data-Plane Interface in a Cluster System to be '9138 (9216 - 78)., where 9216 is the maximum Jumbo MTU. On certain Virtualized / Cloud Platforms, the maximum possible MTU is restricted to a lesser value, Similar calculation can be applied, Maximum Data Plane MTU in Cluster = (Maximum possible MTU - 78). |
Use this method to set the receive ringsize of the interface. A higher number provides more number of buffers in handling incoming traffic. |
Use this method to set the receive ringtype of the interface (Fixed or Elastic). A fixed ring type pre-allocates configured number of buffers irrespective of traffic rate. In contrast, an elastic ring, expands and shrinks based on incoming traffic rate. |
Use this method to set ethernet speed of the interface, in Mbps. Notes: * If you set the speed as AUTO, the Citrix ADC attempts to auto-negotiate or auto-sense the link speed of the interface when it is UP. You must enable auto negotiation on the interface. * If you set a speed other than AUTO, you must specify the same speed for the peer network device. Mismatched speed and duplex settings between the peer devices of a link lead to link errors, packet loss, and other errors. Some interfaces do not support certain speeds. If you specify an unsupported speed, an error message appears. |
Use this method to set add a four-byte 802.1q tag to every packet sent on this interface. The ON setting applies the tag for this interface's native VLAN. OFF applies the tag for all VLANs other than the native VLAN. |
Use this method to set low threshold value for the throughput of the interface, in Mbps. In an HA configuration, failover is triggered if the interface has HA MON enabled and the throughput is below the specified the threshold. |
Use this method to set this argument is deprecated by tagall. NOTE: This attribute is deprecated. The "trunk" argument is confused with LA-trunk, renaming this to "tagall" instead. |
Use this method to set vLAN ID or range of VLAN IDs will be allowed on this trunk interface. In the method line interface, separate the range with a hyphen. For example: 40-90. |
Use this method to set accept and send 802.1q VLAN tagged packets, based on Allowed Vlan List of this interface. |
Use this method to set drop any packet that requires fragmentation. |
Use this method to set threshold value, as a percentage of CPU usage, at which to drop packets that require fragmentation. Applies only if dropFragparameter is set to NO. |
Use this method to set common source IPv6 address for all IPv6 tunnels. Must be a SNIP6 or VIP6 address. |
Use this method to set use a different source IPv6 address for each new session through a particular IPv6 tunnel, as determined by round robin selection of one of the SNIP6 addresses. This setting is ignored if a common global source IPv6 address has been specified for all the IPv6 tunnels. This setting does not apply to a tunnel for which a source IPv6 address has been specified. |
Use this method to set use client source IPv6 address as source IPv6 address for outer tunnel IPv6 header |
Use this method to set change the detination port for a Geneve Tunnel. |
Use this method to set enable or disable the copying of ToS value from the inner packet to the outer IP packet. |
Use this method to set enable or disable the VlanTagging in a Geneve Tunnel. |
Use this method to set drop any IP packet that requires fragmentation before it is sent through the tunnel. |
Use this method to set threshold value, as a percentage of CPU usage, at which to drop packets that require fragmentation to use the IP tunnel. Applies only if dropFragparameter is set to NO. The default value, 0, specifies that this parameter is not set. |
Use this method to set strict PBR check for IPSec packets received through tunnel |
Use this method to set strict PBR check for packets to be sent IPSec protected |
Use this method to set the shared MAC used for shared IP between cluster nodes/HA peers |
Use this method to set common source-IP address for all tunnels. For a specific tunnel, this global setting is overridden if you have specified another source IP address. Must be a MIP or SNIP address. |
Use this method to set use a different source IP address for each new session through a particular IP tunnel, as determined by round robin selection of one of the SNIP addresses. This setting is ignored if a common global source IP address has been specified for all the IP tunnels. This setting does not apply to a tunnel for which a source IP address has been specified. |
Use this method to set use client source IP as source IP for outer tunnel IP header |
Use this method to set enable the Citrix ADC to do Duplicate Address Detection (DAD) for all the Citrix ADC owned IPv6 addresses regardless of whether they are obtained through stateless auto configuration, DHCPv6, or manual configuration. |
Use this method to set prefix used for translating packets from private IPv6 servers to IPv4 packets. This prefix has a length of 96 bits (128-32 = 96). The IPv6 servers embed the destination IP address of the IPv4 servers or hosts in the last 32 bits of the destination IP address field of the IPv6 packets. The first 96 bits of the destination IP address field are set as the IPv6 NAT prefix. IPv6 packets addressed to this prefix have to be routed to the Citrix ADC to ensure that the IPv6-IPv4 translation is done by the appliance. |
Use this method to set base reachable time of the Neighbor Discovery (ND6) protocol. The time, in milliseconds, that the Citrix ADC assumes an adjacent device is reachable after receiving a reachability confirmation. |
Use this method to set retransmission time of the Neighbor Discovery (ND6) protocol. The time, in milliseconds, between retransmitted Neighbor Solicitation (NS) messages, to an adjacent device. |
Use this method to set enable the Citrix ADC to learn about various routes from Router Advertisement (RA) and Router Solicitation (RS) messages sent by the routers. |
Use this method to set enable the Citrix ADC to do Router Redirection. |
Use this method to set iPV6 NATPREFIX used in NAT46 scenario when USIP is turned on |
Use this method to set set/reset proxy ARP in bridge group deployment |
Use this method to set bridging settings for C2C behavior. If enabled, each PE will learn MAC entries independently. Otherwise, when L2 mode is ON, learned MAC entries on a PE will be broadcasted to all other PEs. |
Use this method to set time-out value for the bridge table entries, in seconds. The new value applies only to the entries that are dynamically learned after the new value is set. Previously existing bridge table entries expire after the previously configured time-out value. |
Use this method to set send GARP messagess on VRID-configured interfaces upon failover |
Use this method to set set/reset REPLY form of GARP |
Use this method to set allows MAC mode vserver to pick and forward the packets even if it is destined to Citrix ADC owned VIP. |
Use this method to set maximum bridge collision for loop detection |
Use this method to set enable instant learning of MAC changes in MBF mode. |
Use this method to set when mbf_instant_learning is enabled, learn any changes in peer's MAC after this time interval, which is in 10ms ticks. |
Use this method to set proxies the ARP as Citrix ADC MAC for FreeBSD. |
Use this method to set Return to ethernet sender. |
Use this method to set enable the reset interface upon HA failover. |
Use this method to set control source parameters (IP and Port) for FreeBSD initiated traffic. If Enabled, source parameters are retained. Else proxy the source parameters based on next hop. |
Use this method to set stop Update of server mac change to NAT sessions. |
Use this method to set use Citrix ADC MAC for all outgoing packets. |
Use this method to set control source parameters (IP and Port) for FreeBSD initiated traffic. If enabled proxy the source parameters based on netprofile source ip. If netprofile does not have ip configured, then it will continue to use NSIP as earlier. |
Use this method to set parameter to tune acl logging time |
Use this method to set enable/Disable IPv4 Class E address clients |
Use this method to set enable dropping the IP DF flag. |
Use this method to set enable dropping of IP fragments. |
Use this method to set enable/Disable Dynamic routing on partition. This configuration is not applicable to default partition |
Use this method to set enable external loopback. |
Use this method to set enable forwarding of ICMP fragments. |
Use this method to set nS generated ICMP pkts per 10ms rate threshold |
Use this method to set do not apply ACLs for internal ports |
Use this method to set enable/Disable Policy Based Routing for control packets |
Use this method to set enable/Disable IPv6 Dynamic routing |
Use this method to set enable round robin usage of mapped IPs. |
Use this method to set uSNIP/USIP settings override RNAT settings for configured service/virtual server traffic.. |
Use this method to set perform NAT if only the source is in the private network |
Use this method to set enable/Disable learning PMTU of IP tunnel when ICMP error does not contain connection information. |
Use this method to set enable detection of stray server side pkts in USIP mode. |
Use this method to set layer 2 connection method based on the combination of channel number, MAC address and VLAN. It is tuned with l2conn param of lb vserver. If l2conn of lb vserver is ON then method specified here will be used to identify a connection in addition to the 4-tuple ( |
Use this method to set in L4 switch topology, always clients and servers are on the same side. Enable l4switch to allow such connections. |
Use this method to set priority number that determines which peer device of an LACP LA channel can have control over the LA channel. This parameter is globally applied to all LACP channels on the Citrix ADC. The lower the number, the higher the priority. This is mandatory parameter. |
Use this method to set name of any configured ACL6 whose action is ALLOW. IPv6 Packets matching the condition of this ACL6 rule and destination IP address of these packets matching the NAT64 IPv6 prefix are considered for NAT64 translation. |
Use this method to set name of the configured netprofile. The Citrix ADC selects one of the IP address in the netprofile as the source IP address of the translated IPv4 packet to be sent to the IPv4 server. |
Use this method to set when disabled, translator will not insert IPv6 fragmentation header for non fragmented IPv4 packets |
Use this method to set ignore TOS. |
Use this method to set mTU setting for the IPv6 side. If the incoming IPv4 packet greater than this, either fragment or send icmp need fragmentation error. |
Use this method to set calculate checksum for UDP packets with zero checksum |
Use this method to set cease router advertisements on this vlan. |
Use this method to set current Hop limit. |
Use this method to set default life time, in seconds. |
Use this method to set the Link MTU. |
Use this method to set value to be placed in the Managed address configuration flag field. |
Use this method to set maximum time allowed between unsolicited multicast RAs, in seconds. |
Use this method to set minimum time interval between RA messages, in seconds. |
Use this method to set send only Unicast Router Advertisements in respond to Router Solicitations. |
Use this method to set value to be placed in the Other configuration flag field. |
Use this method to set reachable time, in milliseconds. |
Use this method to set retransmission time, in milliseconds. |
Use this method to set whether the router sends periodic RAs and responds to Router Solicitations. |
Use this method to set include source link layer address option in RA messages. |
Use this method to set the vlan to vxlan mapping to be applied to this netbridge. |
Use this method to set number of protocol violation from an IP address before taking action. |
Use this method to set response will be sent using learnt info if enabled. When creating a netprofile, if you do not set this parameter, the netprofile inherits the global MBF setting (available in the enable ns mode and disable ns mode CLI methods, or in the System > Settings > Configure modes > Configure Modes dialog box). However, you can override this setting after you create the netprofile |
Use this method to set uSNIP/USIP settings override LSN settings for configured service/virtual server traffic.. |
Use this method to set proxy Protocol Action (Enabled/Disabled) |
Use this method to set aDC doesnt look for proxy header before TLS handshake, if enabled. Proxy protocol parsed after TLS handshake |
Use this method to set proxy Protocol Version (V1/V2) |
Use this method to set iP address or the name of an IP set. |
Use this method to set when the net profile is associated with a virtual server or its bound services, this option enables the Citrix ADC to use the same address, specified in the net profile, to communicate to servers for all sessions initiated from a particular client to the virtual server. |
Use this method to set rA Prefix Autonomus flag. |
Use this method to set rA Prefix Autonomus flag. |
Use this method to set depricate the prefix. |
Use this method to set rA Prefix onlink flag. |
Use this method to set preferred life time of the prefix, in seconds. |
Use this method to set valide life time of the prefix, in seconds. |
Use this method to set enables or disables Precision Time Protocol (PTP) on the appliance. If you disable PTP, make sure you enable Network Time Protocol (NTP) on the cluster. This is mandatory parameter. |
Use this method to set name of any configured extended ACL whose action is ALLOW. The condition specified in the extended ACL rule isused as the condition for the RNAT rule. NOTE: This attribute is deprecated. |
Use this method to set synchronize all connection-related information for the RNAT sessions with the secondary ADC in a high availability (HA) pair. |
Use this method to set any NetScaler-owned IPv4 address except the NSIP address. The NetScaler appliance replaces the source IP addresses of server-generated packets with the IP address specified. The IP address must be a public NetScaler-owned IP address. If you specify multiple addresses for this field, NATIP selection uses the round robin algorithm for each session. By specifying a range of IP addresses, you can specify all NetScaler-owned IP addresses, except the NSIP, that fall within the specified range. NOTE: This attribute is deprecated. |
Use this method to set iPv4 network address on whose traffic you want the Citrix ADC to do RNAT processing. NOTE: This attribute is deprecated. |
Use this method to set the owner node group in a Cluster for this rnat rule. |
Use this method to set port number to which the IPv4 packets are redirected. Applicable to TCP and UDP protocols. |
Use this method to set enables the Citrix ADC to use the same NAT IP address for all RNAT sessions initiated from a particular server. |
Use this method to set integer value that uniquely identifies the traffic domain in which you want to configure the entity. If you do not specify an ID, the entity becomes part of the default traffic domain, which has an ID of 0. |
Use this method to set enable source port proxying, which enables the Citrix ADC to use the RNAT ips using proxied source port. |
Use this method to set the owner node group in a Cluster for this rnat rule. |
Use this method to set port number to which the IPv6 packets are redirected. Applicable to TCP and UDP protocols. |
Use this method to set enable source ip persistency, which enables the Citrix ADC to use the RNAT6 ips using source ip. |
Use this method to set enable source ip persistency, which enables the Citrix ADC to use the RNAT ips using source ip. |
Use this method to set enable TCP proxy, which enables the Citrix ADC to optimize the RNAT TCP traffic by using Layer 4 features. |
Use this method to set advertise this route. |
Use this method to set the cost of a route is used to compare routes of the same type. The route having the lowest cost is the most preferred route. Possible values: 0 through 65535. Default: 0. |
Use this method to set administrative distance of this route, which determines the preference of this route over other routes, with same destination, from different routing protocols. A lower value is preferred. |
Use this method to set monitor this route using a monitor of type ARP or PING. |
Use this method to set routing protocol used for advertising this route. |
Use this method to set positive integer used by the routing algorithms to determine preference for this route over others of equal cost. The lower the weight, the higher the preference. |
Use this method to set advertise this route. |
Use this method to set positive integer used by the routing algorithms to determine preference for this route. The lower the cost, the higher the preference. |
Use this method to set administrative distance of this route from the appliance. |
Use this method to set monitor this route with a monitor of type ND6 or PING. |
Use this method to set positive integer used by the routing algorithms to determine preference for this route over others of equal cost. The lower the weight, the higher the preference. |
Use this method to set type of RSS key, possible values are SYMMETRIC and ASYMMETRIC. This is mandatory parameter. |
Use this method to set a name for the VLAN. Must begin with a letter, a number, or the underscore symbol, and can consist of from 1 to 31 letters, numbers, and the hyphen (-), period (.) pound (#), space ( ), at sign (@), equals (=), colon (:), and underscore (_) characters. You should choose a name that helps identify the VLAN. However, you cannot perform any VLAN operation by specifying this name instead of the VLAN ID. |
Use this method to set enable dynamic routing on this VLAN. |
Use this method to set enable IPv6 dynamic routing on this vlan. Note: For the ENABLED setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. |
Use this method to set specifies the maximum transmission unit (MTU), in bytes. The MTU is the largest packet size, excluding 14 bytes of ethernet header and 4 bytes of crc, that can be transmitted and received over this VLAN. |
Use this method to set if sharing is enabled, then this vlan can be shared across multiple partitions by binding it to all those partitions. If sharing is disabled, then this vlan can be bound to only one of the partitions. |
Use this method to set in a cluster setup, assign a cluster node as the owner of this VMAC address for IP based VRRP configuration. If no owner is configured, owner node is displayed as ALL and one node is dynamically elected as the owner. |
Use this method to set in an active-active mode configuration, make a backup VIP address the master if its priority becomes higher than that of a master VIP address bound to this VMAC address. If you disable pre-emption while a backup VIP address is the master, the backup VIP address remains master until the original master VIP's priority becomes higher than that of the current master. |
Use this method to set preemption delay time, in seconds, in an active-active configuration. If any high priority node will come in network, it will wait for these many seconds before becoming master. |
Use this method to set base priority (BP), in an active-active mode configuration, which ordinarily determines the master VIP address. |
Use this method to set in an active-active mode configuration, enable the backup VIP address to process any traffic instead of dropping it. |
Use this method to set priority by which the Effective priority will be reduced if any of the tracked interfaces goes down. |
Use this method to set the effective priority (EP) value, relative to the base priority (BP) value in an active-active mode configuration. When EP is set to a value other than None, it is EP, not BP, which determines the master VIP address. Available settings function as follows: * NONE - No tracking. EP = BP * ALL - If the status of all virtual servers is UP, EP = BP. Otherwise, EP = 0. * ONE - If the status of at least one virtual server is UP, EP = BP. Otherwise, EP = 0. * PROGRESSIVE - If the status of all virtual servers is UP, EP = BP. If the status of all virtual servers is DOWN, EP = 0. Otherwise EP = BP (1 - K/N), where N is the total number of virtual servers associated with the VIP address and K is the number of virtual servers for which the status is DOWN. Default: NONE. |
Use this method to set in a cluster setup, assign a cluster node as the owner of this VMAC address for IP based VRRP configuration. If no owner is configured, ow ner node is displayed as ALL and one node is dynamically elected as the owner. |
Use this method to set in an active-active mode configuration, make a backup VIP address the master if its priority becomes higher than that of a master VIP address bound to this VMAC address. If you disable pre-emption while a backup VIP address is the master, the backup VIP address remains master until the original master VIP's priority becomes higher than that of the current master. |
Use this method to set preemption delay time in seconds, in an active-active configuration. If any high priority node will come in network, it will wait for these many seconds before becoming master. |
Use this method to set base priority (BP), in an active-active mode configuration, which ordinarily determines the master VIP address. |
Use this method to set in an active-active mode configuration, enable the backup VIP address to process any traffic instead of dropping it. |
Use this method to set priority by which the Effective priority will be reduced if any of the tracked interfaces goes down in an active-active configuration. |
Use this method to set the effective priority (EP) value, relative to the base priority (BP) value in an active-active mode configuration. When EP is set to a value other than None, it is EP, not BP, which determines the master VIP address. Available settings function as follows: * NONE - No tracking. EP = BP * ALL - If the status of all virtual servers is UP, EP = BP. Otherwise, EP = 0. * ONE - If the status of at least one virtual server is UP, EP = BP. Otherwise, EP = 0. * PROGRESSIVE - If the status of all virtual servers is UP, EP = BP. If the status of all virtual servers is DOWN, EP = 0. Otherwise EP = BP (1 - K/N), where N is the total number of virtual servers associated with the VIP address and K is the number of virtual servers for which the status is DOWN. Default: NONE. |
Use this method to set number of seconds after which a peer node in active-active mode is marked down if vrrp advertisements are not received from the peer node. |
Use this method to set interval, in milliseconds, between vrrp advertisement messages sent to the peer node in active-active mode. |
Use this method to set forward packets to the master node, in an active-active mode configuration, if the virtual server is in the backup state and sharing is disabled. |
Use this method to set enable dynamic routing on this VXLAN. |
Use this method to set specifies whether Citrix ADC should generate VXLAN packets with inner VLAN tag. |
Use this method to set enable all IPv6 dynamic routing protocols on this VXLAN. Note: For the ENABLED setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. |
Network address associated with the bridge group. |
ID of the VLAN to unbind from this bridge group. |
Interfaces to be unbound from the LA channel of a Citrix ADC or from the LA channel of a cluster configuration. For an LA channel of a Citrix ADC, specify an interface in C/U notation (for example, 1/3). For an LA channel of a cluster configuration, specify an interface in N/C/U notation (for example, 2/1/3). where C can take one of the following values: * 0 - Indicates a management interface. * 1 - Indicates a 1 Gbps port. * 10 - Indicates a 10 Gbps port. U is a unique integer for representing an interface in a particular port group. N is the ID of the node to which an interface belongs in a cluster configuration. Use spaces to separate multiple entries. This is mandatory parameter. |
Interfaces to unbind from the FIS, specified in slot/port notation (for example, 1/3). Use spaces to separate multiple entries. This is mandatory parameter. |
IP addresses to be unbound from the IP set. (If using the CLI, use spaces to separate multiple addresses.). This is mandatory parameter. |
Interfaces to be unbound from the linkset. This is mandatory parameter. |
IPv4 NAT address range of Customer Edge (CE). This is mandatory parameter. |
Basic Mapping rule name. This is mandatory parameter. |
Onlink prefixes for RA messages. This is mandatory parameter. |
The subnet that is part of this network bridge. |
The name of the tunnel that is part of this network bridge. |
The vlan that is part of this network bridge. |
Unbind the already bound natrule from netProfile. |
When the source port range is configured and associated with the netprofile bound to a service group, Citrix ADC will choose a port from the range configured for connection establishment at the backend servers. |
IP address, or multiple NATIP addresses, to be unbound from the RNATrule. (If using the CLI, use spaces to separate multiple addresses.) |
When the source port range is configured and associated with the RNAT rule, Citrix ADC will choose a port from the specified source port range configured for connection establishment at the backend servers. |
IP address, or multiple addresses, to be unbound from the RNAT6rule. (If using the CLI, use spaces to separate multiple addresses.). This is mandatory parameter. |
The owner node group in a Cluster for this rnat rule. NOTE: This attribute is deprecated. This is depricated as ownerGroup is not needed when binding |
Remove all RNAT global config |
Name of the policy to be unbound from the RNAT globally. |
Interface to unbind from the VLAN, specified in slot/port notation (for example, 1/3). |
The IP Address associated with the VLAN configuration. |
The owner node group in a Cluster for this vlan. |
Interfaces to unbind from the VMAC, specified in (slot/port) notation (for example, 1/2). Use spaces to separate multiple entries. |
Interfaces which need to be tracked for this vrID. |
Interfaces to unbind from the VMAC6, specified in (slot/port) notation (for example, 1/2). Use spaces to separate multiple entries. |
Interfaces which need to be tracked for this vrID. |
The source IP address to use in outgoing vxlan packets. |
The VXLAN assigned to the vlan inside the cloud. |
Interval in sec, after which data sessions of PPTP GRE is cleared. |
enable/disable arp spoofing validation |
Time-out value (aging time) for the dynamically learned ARP entries, in seconds. The new value applies only to ARP entries that are dynamically learned after the new value is set. Previously existing ARP entries expire after the previously configured aging time. |
Enable dynamic routing for this bridgegroup. |
Enable all IPv6 dynamic routing protocols on this bridge group. For this setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. For more information about configuring IPv6 dynamic routing protocols on the Citrix ADC, see the Dynamic Routing chapter of the Citrix ADC Networking Guide. |
Time-out value for the bridge table entries, in seconds. The new value applies only to the entries that are dynamically learned after the new value is set. Previously existing bridge table entries expire after the previously configured time-out value. NOTE: This attribute is deprecated. This attribute is moved to set l2Param -bridgeAgeTimeout |
High threshold value for the bandwidth usage of the LA channel, in Mbps. The Citrix ADC generates an SNMP trap message when the bandwidth usage of the LA channel is greater than or equal to the specified high threshold value. |
Normal threshold value for the bandwidth usage of the LA channel, in Mbps. When the bandwidth usage of the LA channel returns to less than or equal to the specified normal threshold after exceeding the high threshold, the Citrix ADC generates an SNMP trap message to indicate that the bandwidth usage has returned to normal. |
The 'connection' distribution mode for the LA channel. NOTE: This attribute is deprecated. Depreicating, as it is a NO-OP |
Required flow control for the LA channel. |
The state of HA HEARTBEAT SEND config for the LA channel. |
The state of HA monitoring for the LA channel. |
The alias name for the interface. |
Link Redundancy for Cluster LAG. |
Specifies the minimum throughput threshold (in Mbps) to be met by the active subchannel. Setting this parameter automatically divides an LACP channel into logical subchannels, with one subchannel active and the others in standby mode. When the maximum supported throughput of the active channel falls below the lrMinThroughput value, link failover occurs and a standby subchannel becomes active. |
The 'MAC' distribution mode for the LA channel. NOTE: This attribute is deprecated. Depricating, as it is a NO-OP |
The mode for the LA channel. NOTE: This attribute is deprecated. Depricating, as user should not be able to set mode. Its value is decided based on the type of channel. |
The Maximum Transmission Unit (MTU) is the largest packet size, measured in bytes excluding 14 bytes ethernet header and 4 bytes CRC, that can be transmitted and received by an interface. The default value of MTU is 1500 on all the interface of Citrix ADC, some Cloud Platforms will restrict Citrix ADC to use the lesser default value. Any MTU value more than 1500 is called Jumbo MTU and will make the interface as jumbo enabled. The Maximum Jumbo MTU in Citrix ADC is 9216, however, some Virtualized / Cloud Platforms will have lesser Maximum Jumbo MTU Value (9000). In the case of Cluster, the Backplane interface requires an MTU value of 78 bytes more than the Max MTU configured on any other Data-Plane Interface. When the Data plane interfaces are all at default 1500 MTU, Cluster Back Plane will be automatically set to 1578 (1500 + 78) MTU. If a Backplane interface is reset to Data Plane Interface, then the 1578 MTU will be automatically reset to the default MTU of 1500(or whatever lesser default value). If any data plane interface of a Cluster is configured with a Jumbo MTU ( > 1500), then all backplane interfaces require to be configured with a minimum MTU of 'Highest Data Plane MTU in the Cluster + 78'. That makes the maximum Jumbo MTU for any Data-Plane Interface in a Cluster System to be '9138 (9216 - 78)., where 9216 is the maximum Jumbo MTU. On certain Virtualized / Cloud Platforms, the maximum possible MTU is restricted to a lesser value, Similar calculation can be applied, Maximum Data Plane MTU in Cluster = (Maximum possible MTU - 78). |
The speed for the LA channel. |
Enable or disable the LA channel. |
The appliance adds a four-byte 802.1q tag to every packet sent on this channel. ON applies tags for all the VLANs that are bound to this channel. OFF, applies the tag for all VLANs other than the native VLAN. |
Low threshold value for the throughput of the LA channel, in Mbps. In an high availability (HA) configuration, failover is triggered when the LA channel has HA MON enabled and the throughput is below the specified threshold. |
This is deprecated by tagall. NOTE: This attribute is deprecated. The "trunk" argument is confused with LA-trunk, renaming this to "tagall" instead. |
Synchronize connection information with the secondary appliance in a high availability (HA) pair. That is, synchronize all connection-related information for the INAT session |
Enable the FTP protocol on the server for transferring files between the client and the server. |
Stateless translation. |
A unique IP address used as the source IP address in packets sent to the server. Must be a MIP or SNIP address. |
Enable TCP proxy, which enables the Citrix ADC to optimize the RNAT TCP traffic by using Layer 4 features. |
To enable/disable TFTP (Default DISABLED). |
Enable the Citrix ADC to proxy the source port of packets before sending the packets to the server. |
Enable the Citrix ADC to retain the source IP address of packets before sending the packets to the server. |
Enable the Citrix ADC to use a SNIP address as the source IP address of packets before sending the packets to the server. |
The prefix used for translating packets received from private IPv6 servers into IPv4 packets. This prefix has a length of 96 bits (128-32 = 96). The IPv6 servers embed the destination IP address of the IPv4 servers or hosts in the last 32 bits of the destination IP address field of the IPv6 packets. The first 96 bits of the destination IP address field are set as the IPv6 NAT prefix. IPv6 packets addressed to this prefix have to be routed to the Citrix ADC to ensure that the IPv6-IPv4 translation is done by the appliance. |
Auto-negotiation state of the interface. With the ENABLED setting, the Citrix ADC auto-negotiates the speed and duplex settings with the peer network device on the link. The Citrix ADC appliance auto-negotiates the settings of only those parameters (speed or duplex mode) for which the value is set as AUTO. |
High threshold value for the bandwidth usage of the interface, in Mbps. The Citrix ADC generates an SNMP trap message when the bandwidth usage of the interface is greater than or equal to the specified high threshold value. |
Normal threshold value for the bandwidth usage of the interface, in Mbps. When the bandwidth usage of the interface becomes less than or equal to the specified normal threshold after exceeding the high threshold, the Citrix ADC generates an SNMP trap message to indicate that the bandwidth usage has returned to normal. |
The duplex mode for the interface. Notes:* If you set the duplex mode to AUTO, the Citrix ADC attempts to auto-negotiate the duplex mode of the interface when it is UP. You must enable auto negotiation on the interface. If you set a duplex mode other than AUTO, you must specify the same duplex mode for the peer network device. Mismatched speed and duplex settings between the peer devices of a link lead to link errors, packet loss, and other errors. |
802.3x flow control setting for the interface. The 802.3x specification does not define flow control for 10 Mbps and 100 Mbps speeds, but if a Gigabit Ethernet interface operates at those speeds, the flow control settings can be applied. The flow control setting that is finally applied to an interface depends on auto-negotiation. With the ON option, the peer negotiates the flow control, but the appliance then forces two-way flow control for the interface. |
In a High Availability (HA) or Cluster configuration, configure the interface for sending heartbeats. In an HA or Cluster configuration, an interface that has HA Heartbeat disabled should not send the heartbeats. |
In a High Availability (HA) configuration, monitor the interface for failure events. In an HA configuration, an interface that has HA MON enabled and is not bound to any Failover Interface Set (FIS), is a critical interface. Failure or disabling of any critical interface triggers HA failover. |
Alias name for the interface. Used only to enhance readability. To perform any operations, you have to specify the interface ID. |
Bind the interface to a LA channel created by the Link Aggregation control protocol (LACP). Available settings function as follows: * Active - The LA channel port of the Citrix ADC generates LACPDU messages on a regular basis, regardless of any need expressed by its peer device to receive them. * Passive - The LA channel port of the Citrix ADC does not transmit LACPDU messages unless the peer device port is in the active mode. That is, the port does not speak unless spoken to. * Disabled - Unbinds the interface from the LA channel. If this is the only interface in the LA channel, the LA channel is removed. |
LACP port priority, expressed as an integer. The lower the number, the higher the priority. The Citrix ADC limits the number of interfaces in an LA channel to sixteen. |
Interval at which the Citrix ADC sends LACPDU messages to the peer device on the LA channel. Available settings function as follows: LONG - 30 seconds. SHORT - 1 second. |
Link Redundancy for Cluster LAG. |
Link Layer Discovery Protocol (LLDP) mode for an interface. The resultant LLDP mode of an interface depends on the LLDP mode configured at the global and the interface levels. |
LRSET port priority, expressed as an integer ranging from 1 to 1024. The highest priority is 1. The Citrix ADC limits the number of interfaces in an LRSET to 8. Within a LRSET the highest LR Priority Interface is considered as the first candidate for the Active interface, if the interface is UP. |
The Maximum Transmission Unit (MTU) is the largest packet size, measured in bytes excluding 14 bytes ethernet header and 4 bytes CRC, that can be transmitted and received by an interface. The default value of MTU is 1500 on all the interface of Citrix ADC, some Cloud Platforms will restrict Citrix ADC to use the lesser default value. Any MTU value more than 1500 is called Jumbo MTU and will make the interface as jumbo enabled. The Maximum Jumbo MTU in Citrix ADC is 9216, however, some Virtualized / Cloud Platforms will have lesser Maximum Jumbo MTU Value (9000). In the case of Cluster, the Backplane interface requires an MTU value of 78 bytes more than the Max MTU configured on any other Data-Plane Interface. When the Data plane interfaces are all at default 1500 MTU, Cluster Back Plane will be automatically set to 1578 (1500 + 78) MTU. If a Backplane interface is reset to Data Plane Interface, then the 1578 MTU will be automatically reset to the default MTU of 1500(or whatever lesser default value). If any data plane interface of a Cluster is configured with a Jumbo MTU ( > 1500), then all backplane interfaces require to be configured with a minimum MTU of 'Highest Data Plane MTU in the Cluster + 78'. That makes the maximum Jumbo MTU for any Data-Plane Interface in a Cluster System to be '9138 (9216 - 78)., where 9216 is the maximum Jumbo MTU. On certain Virtualized / Cloud Platforms, the maximum possible MTU is restricted to a lesser value, Similar calculation can be applied, Maximum Data Plane MTU in Cluster = (Maximum possible MTU - 78). |
The receive ringsize of the interface. A higher number provides more number of buffers in handling incoming traffic. |
The receive ringtype of the interface (Fixed or Elastic). A fixed ring type pre-allocates configured number of buffers irrespective of traffic rate. In contrast, an elastic ring, expands and shrinks based on incoming traffic rate. |
Ethernet speed of the interface, in Mbps. Notes: * If you set the speed as AUTO, the Citrix ADC attempts to auto-negotiate or auto-sense the link speed of the interface when it is UP. You must enable auto negotiation on the interface. * If you set a speed other than AUTO, you must specify the same speed for the peer network device. Mismatched speed and duplex settings between the peer devices of a link lead to link errors, packet loss, and other errors. Some interfaces do not support certain speeds. If you specify an unsupported speed, an error message appears. |
Add a four-byte 802.1q tag to every packet sent on this interface. The ON setting applies the tag for this interface's native VLAN. OFF applies the tag for all VLANs other than the native VLAN. |
Low threshold value for the throughput of the interface, in Mbps. In an HA configuration, failover is triggered if the interface has HA MON enabled and the throughput is below the specified the threshold. |
This argument is deprecated by tagall. NOTE: This attribute is deprecated. The "trunk" argument is confused with LA-trunk, renaming this to "tagall" instead. |
VLAN ID or range of VLAN IDs will be allowed on this trunk interface. In the method line interface, separate the range with a hyphen. For example: 40-90. |
Accept and send 802.1q VLAN tagged packets, based on Allowed Vlan List of this interface. |
Drop any packet that requires fragmentation. |
Threshold value, as a percentage of CPU usage, at which to drop packets that require fragmentation. Applies only if dropFragparameter is set to NO. |
Common source IPv6 address for all IPv6 tunnels. Must be a SNIP6 or VIP6 address. |
Use a different source IPv6 address for each new session through a particular IPv6 tunnel, as determined by round robin selection of one of the SNIP6 addresses. This setting is ignored if a common global source IPv6 address has been specified for all the IPv6 tunnels. This setting does not apply to a tunnel for which a source IPv6 address has been specified. |
Use client source IPv6 address as source IPv6 address for outer tunnel IPv6 header |
Change the detination port for a Geneve Tunnel. |
Enable or disable the copying of ToS value from the inner packet to the outer IP packet. |
Enable or disable the VlanTagging in a Geneve Tunnel. |
Drop any IP packet that requires fragmentation before it is sent through the tunnel. |
Threshold value, as a percentage of CPU usage, at which to drop packets that require fragmentation to use the IP tunnel. Applies only if dropFragparameter is set to NO. The default value, 0, specifies that this parameter is not set. |
Strict PBR check for IPSec packets received through tunnel |
Strict PBR check for packets to be sent IPSec protected |
The shared MAC used for shared IP between cluster nodes/HA peers |
Common source-IP address for all tunnels. For a specific tunnel, this global setting is overridden if you have specified another source IP address. Must be a MIP or SNIP address. |
Use a different source IP address for each new session through a particular IP tunnel, as determined by round robin selection of one of the SNIP addresses. This setting is ignored if a common global source IP address has been specified for all the IP tunnels. This setting does not apply to a tunnel for which a source IP address has been specified. |
Use client source IP as source IP for outer tunnel IP header |
Enable the Citrix ADC to do Duplicate Address Detection (DAD) for all the Citrix ADC owned IPv6 addresses regardless of whether they are obtained through stateless auto configuration, DHCPv6, or manual configuration. |
Prefix used for translating packets from private IPv6 servers to IPv4 packets. This prefix has a length of 96 bits (128-32 = 96). The IPv6 servers embed the destination IP address of the IPv4 servers or hosts in the last 32 bits of the destination IP address field of the IPv6 packets. The first 96 bits of the destination IP address field are set as the IPv6 NAT prefix. IPv6 packets addressed to this prefix have to be routed to the Citrix ADC to ensure that the IPv6-IPv4 translation is done by the appliance. |
Base reachable time of the Neighbor Discovery (ND6) protocol. The time, in milliseconds, that the Citrix ADC assumes an adjacent device is reachable after receiving a reachability confirmation. |
Retransmission time of the Neighbor Discovery (ND6) protocol. The time, in milliseconds, between retransmitted Neighbor Solicitation (NS) messages, to an adjacent device. |
Enable the Citrix ADC to learn about various routes from Router Advertisement (RA) and Router Solicitation (RS) messages sent by the routers. |
Enable the Citrix ADC to do Router Redirection. |
IPV6 NATPREFIX used in NAT46 scenario when USIP is turned on |
Set/reset proxy ARP in bridge group deployment |
Bridging settings for C2C behavior. If enabled, each PE will learn MAC entries independently. Otherwise, when L2 mode is ON, learned MAC entries on a PE will be broadcasted to all other PEs. |
Time-out value for the bridge table entries, in seconds. The new value applies only to the entries that are dynamically learned after the new value is set. Previously existing bridge table entries expire after the previously configured time-out value. |
Send GARP messagess on VRID-configured interfaces upon failover |
Set/reset REPLY form of GARP |
Allows MAC mode vserver to pick and forward the packets even if it is destined to Citrix ADC owned VIP. |
Maximum bridge collision for loop detection |
Enable instant learning of MAC changes in MBF mode. |
When mbf_instant_learning is enabled, learn any changes in peer's MAC after this time interval, which is in 10ms ticks. |
Proxies the ARP as Citrix ADC MAC for FreeBSD. |
Return to ethernet sender. |
Enable the reset interface upon HA failover. |
Control source parameters (IP and Port) for FreeBSD initiated traffic. If Enabled, source parameters are retained. Else proxy the source parameters based on next hop. |
Stop Update of server mac change to NAT sessions. |
Use Citrix ADC MAC for all outgoing packets. |
Control source parameters (IP and Port) for FreeBSD initiated traffic. If enabled proxy the source parameters based on netprofile source ip. If netprofile does not have ip configured, then it will continue to use NSIP as earlier. |
Parameter to tune acl logging time |
Enable/Disable IPv4 Class E address clients |
Enable dropping the IP DF flag. |
Enable dropping of IP fragments. |
Enable/Disable Dynamic routing on partition. This configuration is not applicable to default partition |
Enable external loopback. |
Enable forwarding of ICMP fragments. |
NS generated ICMP pkts per 10ms rate threshold |
Do not apply ACLs for internal ports |
Enable/Disable Policy Based Routing for control packets |
Enable/Disable IPv6 Dynamic routing |
Enable round robin usage of mapped IPs. |
USNIP/USIP settings override RNAT settings for configured service/virtual server traffic.. |
Perform NAT if only the source is in the private network |
Enable/Disable learning PMTU of IP tunnel when ICMP error does not contain connection information. |
Enable detection of stray server side pkts in USIP mode. |
Layer 2 connection method based on the combination of channel number, MAC address and VLAN. It is tuned with l2conn param of lb vserver. If l2conn of lb vserver is ON then method specified here will be used to identify a connection in addition to the 4-tuple ( |
In L4 switch topology, always clients and servers are on the same side. Enable l4switch to allow such connections. |
Name of the configured netprofile. The Citrix ADC selects one of the IP address in the netprofile as the source IP address of the translated IPv4 packet to be sent to the IPv4 server. |
When disabled, translator will not insert IPv6 fragmentation header for non fragmented IPv4 packets |
Ignore TOS. |
MTU setting for the IPv6 side. If the incoming IPv4 packet greater than this, either fragment or send icmp need fragmentation error. |
Calculate checksum for UDP packets with zero checksum |
Cease router advertisements on this vlan. |
Current Hop limit. |
Default life time, in seconds. |
The Link MTU. |
Value to be placed in the Managed address configuration flag field. |
Maximum time allowed between unsolicited multicast RAs, in seconds. |
Minimum time interval between RA messages, in seconds. |
Send only Unicast Router Advertisements in respond to Router Solicitations. |
Value to be placed in the Other configuration flag field. |
Reachable time, in milliseconds. |
Retransmission time, in milliseconds. |
whether the router sends periodic RAs and responds to Router Solicitations. |
Include source link layer address option in RA messages. |
The vlan to vxlan mapping to be applied to this netbridge. |
Number of protocol violation from an IP address before taking action. |
Response will be sent using learnt info if enabled. When creating a netprofile, if you do not set this parameter, the netprofile inherits the global MBF setting (available in the enable ns mode and disable ns mode CLI methods, or in the System > Settings > Configure modes > Configure Modes dialog box). However, you can override this setting after you create the netprofile |
USNIP/USIP settings override LSN settings for configured service/virtual server traffic.. |
Proxy Protocol Action (Enabled/Disabled) |
ADC doesnt look for proxy header before TLS handshake, if enabled. Proxy protocol parsed after TLS handshake |
Proxy Protocol Version (V1/V2) |
IP address or the name of an IP set. |
When the net profile is associated with a virtual server or its bound services, this option enables the Citrix ADC to use the same address, specified in the net profile, to communicate to servers for all sessions initiated from a particular client to the virtual server. |
RA Prefix Autonomus flag. |
RA Prefix Autonomus flag. |
Depricate the prefix. |
RA Prefix onlink flag. |
Preferred life time of the prefix, in seconds. |
Valide life time of the prefix, in seconds. |
Name of any configured extended ACL whose action is ALLOW. The condition specified in the extended ACL rule isused as the condition for the RNAT rule. NOTE: This attribute is deprecated. |
Synchronize all connection-related information for the RNAT sessions with the secondary ADC in a high availability (HA) pair. |
The NAT IP address defined for the RNAT entry. NOTE: This attribute is deprecated. |
IPv4 network address on whose traffic you want the Citrix ADC to do RNAT processing. NOTE: This attribute is deprecated. |
The owner node group in a Cluster for this rnat rule. |
Port number to which the IPv4 packets are redirected. Applicable to TCP and UDP protocols. |
Enables the Citrix ADC to use the same NAT IP address for all RNAT sessions initiated from a particular server. |
Integer value that uniquely identifies the traffic domain in which you want to configure the entity. If you do not specify an ID, the entity becomes part of the default traffic domain, which has an ID of 0. |
Enable source port proxying, which enables the Citrix ADC to use the RNAT ips using proxied source port. |
The owner node group in a Cluster for this rnat rule. |
Port number to which the IPv6 packets are redirected. Applicable to TCP and UDP protocols. |
Enable source ip persistency, which enables the Citrix ADC to use the RNAT6 ips using source ip. |
Enable source ip persistency, which enables the Citrix ADC to use the RNAT ips using source ip. |
Enable TCP proxy, which enables the Citrix ADC to optimize the RNAT TCP traffic by using Layer 4 features. |
Advertise this route. |
The cost of a route is used to compare routes of the same type. The route having the lowest cost is the most preferred route. Possible values: 0 through 65535. Default: 0. |
Administrative distance of this route, which determines the preference of this route over other routes, with same destination, from different routing protocols. A lower value is preferred. |
Name of the monitor, of type ARP or PING, configured on the Citrix ADC to monitor this route. |
Monitor this route using a monitor of type ARP or PING. |
Routing protocol used for advertising this route. |
Positive integer used by the routing algorithms to determine preference for this route over others of equal cost. The lower the weight, the higher the preference. |
Advertise this route. |
Positive integer used by the routing algorithms to determine preference for this route. The lower the cost, the higher the preference. |
Administrative distance of this route from the appliance. |
Name of the monitor, of type ND6 or PING, configured on the Citrix ADC to monitor this route. |
Monitor this route with a monitor of type ND6 or PING. |
Positive integer used by the routing algorithms to determine preference for this route over others of equal cost. The lower the weight, the higher the preference. |
A name for the VLAN. Must begin with a letter, a number, or the underscore symbol, and can consist of from 1 to 31 letters, numbers, and the hyphen (-), period (.) pound (#), space ( ), at sign (@), equals (=), colon (:), and underscore (_) characters. You should choose a name that helps identify the VLAN. However, you cannot perform any VLAN operation by specifying this name instead of the VLAN ID. |
Enable dynamic routing on this VLAN. |
Enable IPv6 dynamic routing on this vlan. Note: For the ENABLED setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. |
Specifies the maximum transmission unit (MTU), in bytes. The MTU is the largest packet size, excluding 14 bytes of ethernet header and 4 bytes of crc, that can be transmitted and received over this VLAN. |
If sharing is enabled, then this vlan can be shared across multiple partitions by binding it to all those partitions. If sharing is disabled, then this vlan can be bound to only one of the partitions. |
In a cluster setup, assign a cluster node as the owner of this VMAC address for IP based VRRP configuration. If no owner is configured, owner node is displayed as ALL and one node is dynamically elected as the owner. |
In an active-active mode configuration, make a backup VIP address the master if its priority becomes higher than that of a master VIP address bound to this VMAC address. If you disable pre-emption while a backup VIP address is the master, the backup VIP address remains master until the original master VIP's priority becomes higher than that of the current master. |
Preemption delay time, in seconds, in an active-active configuration. If any high priority node will come in network, it will wait for these many seconds before becoming master. |
Base priority (BP), in an active-active mode configuration, which ordinarily determines the master VIP address. |
In an active-active mode configuration, enable the backup VIP address to process any traffic instead of dropping it. |
Priority by which the Effective priority will be reduced if any of the tracked interfaces goes down. |
The effective priority (EP) value, relative to the base priority (BP) value in an active-active mode configuration. When EP is set to a value other than None, it is EP, not BP, which determines the master VIP address. Available settings function as follows: * NONE - No tracking. EP = BP * ALL - If the status of all virtual servers is UP, EP = BP. Otherwise, EP = 0. * ONE - If the status of at least one virtual server is UP, EP = BP. Otherwise, EP = 0. * PROGRESSIVE - If the status of all virtual servers is UP, EP = BP. If the status of all virtual servers is DOWN, EP = 0. Otherwise EP = BP (1 - K/N), where N is the total number of virtual servers associated with the VIP address and K is the number of virtual servers for which the status is DOWN. Default: NONE. |
In a cluster setup, assign a cluster node as the owner of this VMAC address for IP based VRRP configuration. If no owner is configured, ow ner node is displayed as ALL and one node is dynamically elected as the owner. |
In an active-active mode configuration, make a backup VIP address the master if its priority becomes higher than that of a master VIP address bound to this VMAC address. If you disable pre-emption while a backup VIP address is the master, the backup VIP address remains master until the original master VIP's priority becomes higher than that of the current master. |
Preemption delay time in seconds, in an active-active configuration. If any high priority node will come in network, it will wait for these many seconds before becoming master. |
Base priority (BP), in an active-active mode configuration, which ordinarily determines the master VIP address. |
In an active-active mode configuration, enable the backup VIP address to process any traffic instead of dropping it. |
Priority by which the Effective priority will be reduced if any of the tracked interfaces goes down in an active-active configuration. |
The effective priority (EP) value, relative to the base priority (BP) value in an active-active mode configuration. When EP is set to a value other than None, it is EP, not BP, which determines the master VIP address. Available settings function as follows: * NONE - No tracking. EP = BP * ALL - If the status of all virtual servers is UP, EP = BP. Otherwise, EP = 0. * ONE - If the status of at least one virtual server is UP, EP = BP. Otherwise, EP = 0. * PROGRESSIVE - If the status of all virtual servers is UP, EP = BP. If the status of all virtual servers is DOWN, EP = 0. Otherwise EP = BP (1 - K/N), where N is the total number of virtual servers associated with the VIP address and K is the number of virtual servers for which the status is DOWN. Default: NONE. |
Number of seconds after which a peer node in active-active mode is marked down if vrrp advertisements are not received from the peer node. |
Interval, in milliseconds, between vrrp advertisement messages sent to the peer node in active-active mode. |
Forward packets to the master node, in an active-active mode configuration, if the virtual server is in the backup state and sharing is disabled. |
Enable dynamic routing on this VXLAN. |
Specifies whether Citrix ADC should generate VXLAN packets with inner VLAN tag. |
Enable all IPv6 dynamic routing protocols on this VXLAN. Note: For the ENABLED setting to work, you must configure IPv6 dynamic routing protocols from the VTYSH method line. |
Specifies UDP destination port for VXLAN packets. |
ID of VLANs whose traffic is allowed over this VXLAN. If you do not specify any VLAN IDs, the Citrix ADC allows traffic of all VLANs that are not part of any other VXLANs. |