To configure a Citrix ADC high availability pair with each Citrix ADC in a different subnet, the administrator needs to turn on Independent Network Configuration (INC) mode. INC mode allows each node in the high availability pair to maintain independent network configurations, which is essential when the nodes are in different subnets.
To achieve the requirement of allowing existing connections to be honored while not accepting new connections, and eventually closing all connections after a specific period, the 'Wait time' parameter should be configured. This parameter sets a grace period during which existing connections are maintained, and no new requests are accepted, effectively allowing a graceful shutdown of the service.
To ensure that all traffic is routed away from the server without affecting other servers during business hours, the administrator should disable the backend service entity targeted for change. This approach is efficient because it specifically targets the service associated with the server that needs maintenance without disrupting the entire server entity or the load-balancing virtual server. This allows other protocols and services to continue operating on the unaffected servers.
If a Citrix Administrator is not seeing detailed TCP information, the most likely cause is that TCP logging is not enabled. By default, TCP logging is disabled, so enabling this setting is necessary to see TCP-specific logs. Ensuring TCP logging is enabled will allow the syslog server to capture and display detailed TCP information.
To change or remove the ns_default_ssl_profile_frontend SSL profile once it is enabled, the administrator can unbind the default SSL profile and bind the newly created SSL profile. Additionally, they can create a separate SSL profile to replace the default one. These actions ensure that the SSL profile settings can be customized as per the requirements of the new vServer.