"Charting the Course to Your Success!" Citrix NetScaler 11 Essentials and Networking CNS 205 Course Summary

Transcription

1 Course Summary Description The objective of the Citrix NetScaler 11 Essentials and Networking course is to provide the foundational concepts and skills necessary to implement, configure, secure, monitor, optimize and troubleshoot a Citrix NetScaler system within a networking framework. This course is designed specifically for students who have limited or no previous NetScaler experience. Students will have access to hands-on exercises within a virtual lab environment. This course is based on the Citrix NetScaler 11 product, but the skills and fundamental concepts learned are common to earlier product versions. An optional module on NetScaler SDX appliances is included with reinforcement simulation exercises. Objectives At the end of this course, students will be able to: Identify the capabilities and functionality of the NetScaler Explain basic NetScaler network architecture Obtain, install and manage NetScaler licenses Explain how SSL is used to secure the NetScaler Optimize the NetScaler system for traffic handling and management. Customize the NetScaler system for traffic flow and content-specific requirements Demonstrate monitoring and reporting through native NetScaler logging tools Employ recommended tools and techniques to troubleshoot common NetScaler network and connectivity issues Implement NetScaler TriScale Technology, including Clustering Configure advanced load balancing and GSLB on the NetScaler system Identify the capabilities, functionality and networking characteristics of the NetScaler SDX platform Explain the process of provisioning and administration of NetScaler VPX instances on a NetScaler SDX appliance. Topics Getting Started Basic Networking High Availability Securing NetScaler Basic Load Balancing SSL Offload Global Server Load Balancing AppExpert Classic Policy Engine AppExpert Default Policy Engine Rewrite, Responder, and URL Transformation Clustering Monitoring and Management Audience This course is designed for Network Administrators/Engineers, Citrix Administrators, Operations Engineers, Systems Administrators/Engineers and Cloud Administrators/Engineers who are new to the NetScaler platform. Those interested in also learning about integrating NetScaler Gateway should consider taking CNS-207 Implementing Citrix NetScaler 10.5 for App and Desktop Solutions instead.

2 Course Summary (con t) Prerequisites Students should prepare for this course by gaining a basic understanding of the following concepts and technologies: Windows and Linux Server administration TCP/IP, HTTP protocols and the OSI model Server load balancing and content switching concepts Web server software (e.g. Apache, IIS) DNS, SSL and compression concepts Network security threats and site protection concepts (e.g. DDoS attack, firewall) Duration Five days

3 Course Outline I. Getting Started A. Introduction to the NetScaler System B. NetScaler Functionality C. NetScaler Overview D. Product Features E. NetScaler Operating System Overview F. Hardware Platforms G. Hardware Components H. ncore Configuration Architecture I. Deployment Scenarios J. Logging on to the NetScaler System K. NetScaler Licenses L. Performing an Upgrade II. III. IV. Basic Networking A. OSI Networking Model B. NetScaler Architecture Overview C. NetScaler-Owned IP Addresses D. Network Topology E. NetScaler Network Interfaces F. Virtual Local Area Networks (VLANs) G. IP Routing H. Determining the Source IP Address I. Packet Forwarding J. Use Source IP Mode K. Client-IP HTTP Header Insertion L. Path MTU Discovery M. Link Aggregation N. Network Address Translation (NAT) High Availability A. High Availability Functionality B. High Availability Node Configuration C. Propagation and Synchronization D. High Availability Management Securing NetScaler A. NetScaler System Communication B. Access Control Lists C. Access Control List Configuration D. Detailed Access Control List Configuration E. Users, Groups, and Command Policies F. External Authentication for System Users G. Authentication, Authorization, and Auditing (AAA) Issues H. Authentication Troubleshooting V. Basic Load Balancing A. Load Balancing Basics B. Entity Management C. Server Creation D. Services Configuration Overview VI. VII. E. Virtual Server Creation F. Binding Virtual Servers to Services or a Service Group G. Traffic Types H. Service Monitoring I. Persistence and Persistence Connections J. Load-Balancing Configuration Protection K. Advanced Services Options L. Maintaining of Client Connection for Multiple Client Requests M. Specified Source IP Addresses for Backend Communication Using Network Profiles N. Disabling Services O. Graceful Shutdown of Services P. Removing Services Q. Configuration Verification R. The Load-Balancing Visualizer S. Configuring Load Balancing for DataStream T. Link Load Balancing U. Configuration of Sessionless Load- Balancing Virtual Servers V. Load-Balancing Issues W. Use of Telnet or Monitors to Check Ports SSL Offload A. SSL B. SSL Session Process C. Feature and Benefits D. Offload Performance E. Digital Certificates F. SSL Administration G. SSL Offload Overview H. Deployment Scenarios I. Citrix Recommendations for SSL J. SSL Renegotiation Attack K. SSL Troubleshooting L. Intermediate Certificate Not Linked Global Server Load Balancing A. GSLB Deployment Methods B. GSLB Concepts C. GSLB Entities D. GSLB DNS Methods E. Metric Exchange Protocol F. Implementing GSLB G. Viewing and Configuring GSLB with the Visualizer H. Configuring Site-to-Site Communication I. RPC Node Password J. Encryption of Site Metrics Exchange

4 Course Outline (cont d) VIII. IX. K. Source IP Address for an RPC Node L. GSLB Site Communication Example M. Customizing the GSLB Configuration N. Changing the GSLB Method O. GSLB Persistence P. Using Dynamic Weights for Services Q. Monitoring GSLB Services R. Binding Monitors to a GSLB Service S. Monitoring GSLB Sites T. Protecting the GSLB Setup Against Failure U. Responding with an Empty Address Record When DOWN V. Backup IP Address Configuration for a GSLB Domain W. Implementing GSLB Failover for Disaster Recovery AppExpert Classic Policy Engine A. Policies Overview B. Expression Structures C. Content Filtering D. Content Filtering Actions E. Content Filtering Rules AppExpert Default Policy Engine A. Understanding Packet-Processing Flow B. Understanding Policies C. Policy Process Evaluation Flow D. Identifying Default Policy Expressions E. Actions F. Understanding Bind Points G. Understanding Policy Labels H. Pattern Sets I. Typecasting J. Rewrite, Responder, and URL Transformation X. Rewrite, Responder, and URL Transform A. Configuring Rewrite Policies and Actions B. Responder Actions C. Respondwith D. Responder Action for Timeouts E. Responder Policies F. Responder HTML Page Imports G. Binding Policies H. URL Transformation I. URL Transformation Actions J. Binding of URL Transformations XI. XII. XIII. A. Introduction to B. Understanding C. Based on Network Characteristics D. Content-Switching Virtual Servers and Load-Balancing Virtual Servers E. Configuring Content-Switching Virtual Servers F. Configure a Load-Balancing Setup for G. Content-Switching Policies H. Binding Content-Switching Policies I. Content-Switching Rule Precedence Without Priority Specified J. Content-Switching Rule Precedence With Priority Specified K. Configuring for DataStream Optimizing Traffic A. Introduction to Compression B. Action Analytics C. AppExpert Templates D. Terminiology E. Deploying NetScaler for an Application F. Application Example G. AppExpert Template Deployment Clustering A. How Clustering Works B. Cluster Synchronization C. Cluster Connections D. Cluster Communication Interfaces E. Striped and Spotted IP Addresses F. Traffic Distribution G. Cluster and Node States H. NetScaler Cluster Set up I. NetScaler Cluster Traffic Distribution Mechanisms J. To Configure a Cluster Link Aggregation Group Statically K. Dynamic Configuration for a Cluster Link Aggregation Group L. NetScaler Cluster Management M. NetScaler Cluster Troubleshooting

5 Course Outline (cont d) XIV. Monitoring and Management A. Monitoring Needs B. NetScaler Log Management C. Simple Network Management Protocol D. To Configure SMNPv1 and SMNPv2 E. AppFlow on the NetScaler System F. AppFlow Collectors and EdgeSight Monitoring G. AppFlow Actions and EdgeSight Monitoring Responder Policies H. Third-Party Collectors I. Network Traffic Capture using NSTRACE J. Troubleshooting with Filter Expressions K. Decoding SSL Traffic with Wireshark L. Display NetScaler System Information XV. Addendum: Citrix NetScaler 10.1 Essentials for SDX Appliances A. Identify the unique capabilities and functionality of the NetScaler SDX platform B. Identify the networking characteristics of the NetScaler SDX platform C. Explain the process of provisioning and administration of NetScaler VPX instances on a NetScaler SDX appliance