Citrix NetScaler VPX ---基礎1

一.Enabling and Disabling Features

在NetScaler system中可以用如下的步驟開啓features

1.打開瀏覽器輸入http://NSIP,然後回車。NSIP是ns的管理地址，如http://192.168.10.250

2.用你的管理員帳號登錄管理界面，到system/settings/configure basic features,勾選你需要的features即可。

命令行界面操作：

1.用ssh登錄ns終端

#查看features狀態
> show ns feature

  Feature                                                Acronym                            Status
  -------                                                -------                            ------
1)  Web Logging                                        WL                                     ON
2)  Surge Protection                             SP                                     ON
3)  Load Balancing                                 LB                                     ON
4)  Content Switching                            CS                                     ON
5)  Cache Redirection                            CR                                     ON
6)  Sure Connect                                     SC                                     ON
7)  Compression Control                        CMP                                    ON
8)  Priority Queuing                             PQ                                     ON
9)  SSL Offloading                                 SSL                                    ON
10)  Global Server Load Balancing     GSLB                                 ON
11)  Http DoS Protection                        HDOSP                                ON
12)  Content Filtering                            CF                                     ON
13)  Integrated Caching                         IC                                     OFF
14)  SSL ***                                                SSL***                             ON
15)  AAA                                                        AAA                                    ON
16)  OSPF Routing                                     OSPF                                 ON
17)  RIP Routing                                        RIP                                    ON
18)  BGP Routing                                        BGP                                    ON
19)  Rewrite                                                REWRITE                            ON
20)  IPv6 protocol translation            IPv6PT                             ON
21)  Application Firewall                     AppFw                                ON
22)  Responder                                            RESPONDER                        ON
23)  HTML Injection                                 HTMLInjection                ON
24)  NetScaler Push                                 push                                 ON
Done
#開啓feature
> enable ns feature ssl lb
Done
#關閉feature
> disable ns feature ssl lb
Done

二.創建管理員賬號

1.到system/users下，右鍵添加用戶，填寫相關信息保存即可。

可創建用戶模版，在創建多個用戶時選擇模版即可

命令行模式添加用戶：

#添加用戶testuser，密碼爲password1
> add system user testuser password1
Done
#查看權限級別
> show system cmdpolicy
1)  Command policy: operator
2)  Command policy: read-only
3)  Command policy: network
4)  Command policy: superuser
Done
#爲testuser分配權限，2爲優先級
> bind system user testuser read-only 2
Done
#保存當前配置
> save ns config
Done

三.查看當前配置

命令行界面：

> show ns runningconfig
#NS9.2 Build 54.3
# Last modified by `save config`, Tue Oct    9 11:33:32 2012
set ns config -IPAddress 192.168.10.250 -netmask 255.255.255.0
set ns config -timezone GMT+08:00-CST-Asia/Shanghai
set ns config -grantQuotaMaxClient 0
......
> shell
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
root@ns# cd /nsconfig
root@ns# more /nsconfig/ns.conf

四.配置備份
在命令行界面shell模式下：

> shell
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
  The Regents of the University of California. All rights reserved.

root@ns# tar cvfz /var/tmp/backup.tgz /flash/nsconfig
tar: Removing leading `/' from member names
flash/nsconfig/
flash/nsconfig/license/
flash/nsconfig/license/000c29b16784.lic
flash/nsconfig/nstemplates
flash/nsconfig/ssl/
flash/nsconfig/ssl/ns-root.key
flash/nsconfig/ssl/ns-root.req
flash/nsconfig/ssl/ns-root.cert
flash/nsconfig/ssl/ns-server.key
flash/nsconfig/ssl/ns-server.req
flash/nsconfig/ssl/ns-root.srl
flash/nsconfig/ssl/ns-server.cert
flash/nsconfig/ssh/
flash/nsconfig/ssh/ssh_host_key
flash/nsconfig/ssh/ssh_host_key.pub
flash/nsconfig/ssh/ssh_host_rsa_key
flash/nsconfig/ssh/ssh_host_rsa_key.pub
flash/nsconfig/ssh/ssh_host_dsa_key
flash/nsconfig/ssh/ssh_host_dsa_key.pub
flash/nsconfig/htmlinjection/
flash/nsconfig/htmlinjection/ens
flash/nsconfig/ns.conf
flash/nsconfig/ns.conf.NS9.2-
flash/nsconfig/monitors/
flash/nsconfig/monitors/perl_mod/
flash/nsconfig/monitors/perl_mod/Netscaler/
flash/nsconfig/monitors/perl_mod/Netscaler/KAS.pm
flash/nsconfig/monitors/nsall.pl
flash/nsconfig/monitors/nsftp.pl
flash/nsconfig/monitors/nsldap.pl
flash/nsconfig/monitors/nsmysql.pl
flash/nsconfig/monitors/nsnntp.pl
flash/nsconfig/monitors/nsntlm-lwp.pl
flash/nsconfig/monitors/nspop3.pl
flash/nsconfig/monitors/nsrdp.pl
flash/nsconfig/monitors/nssmtp.pl
flash/nsconfig/monitors/nssnmp.pl
flash/nsconfig/monitors/nsumon-debug.pl
flash/nsconfig/snmpd.conf
flash/nsconfig/rc.conf
flash/nsconfig/localtime
flash/nsconfig/ns.conf.0
flash/nsconfig/ZebOS.conf
flash/nsconfig/ZebOS.conf.3
flash/nsconfig/ns.conf.1
flash/nsconfig/ZebOS.conf.0
flash/nsconfig/ns.conf.2
flash/nsconfig/ZebOS.conf.1
flash/nsconfig/ns.conf.3
flash/nsconfig/ns.conf.4
flash/nsconfig/ZebOS.conf.2
flash/nsconfig/ZebOS.conf.4
root@ns# exit
logout
Done
> shell
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
  The Regents of the University of California. All rights reserved.

root@ns# cd /var/tmp
root@ns# ls
backup.tgz
root@ns# exit
logout
Done
>