Page 1
Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide Last Modified: 2016-01-08 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387)
Page 2
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
Licensing for Cisco RISE Guidelines and Limitations for Preparing for the RISE Integration Preparing for Cisco RISE with Citrix Application Delivery Controller (ADC) Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 4
Configuring RISE in a vPC Indirect Mode Deployment Configuring RISE on the Cisco Nexus Switch Configuring NSIP on the Appliance Configuring NSIP Using the CLI Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 5
Enabling APBR on the Cisco Nexus Switch Configuring APBR on the Citrix NetScaler Application Delivery Controller (ADC) Appliance Configuring NSIP on the Appliance Configuring NSIP Using the CLI Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 6
Finding Feature Information Troubleshooting the RISE Integration Interpreting System Messages Troubleshooting the RISE Configuration on the Switch Troubleshooting the RISE Service on the Appliance Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Square brackets enclose an optional element (keyword or argument). [x | y] Square brackets enclosing keywords or arguments separated by a vertical bar indicate an optional choice. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 8
Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide viii...
What's New in Cisco Product Documentation. To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the What's New in Cisco Product Documentation RSS feed. RSS feeds are a free service.
Page 10
Preface Obtaining Documentation and Submitting a Service Request Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Cisco Nexus 7000 Platform. 7.2(0)D1(1) • Route health injection. • ISIM initialization and flow. • RHI with VPC. • Interface database. • ISCC. • URIB. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 12
New and Changed Information New and Changed Information for RISE Integration Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Cisco Nexus Series switches. Cisco RISE is an architecture that logically integrates an external service appliance, such as a Citrix NetScaler Application Delivery Controller (ADC) appliance appears and operates as a service module within the Cisco Nexus switch.
Extensible Markup Language (XML) interface and a command-line interface (CLI) that is similar to Cisco IOS software. As a crucial element in data center I/O consolidation, the switch enables I/O consolidation at the access layer and provides interoperability with the Cisco Nexus Series switches and other standards-based products.
The Cisco Nexus switch and the appliance also periodically send heartbeat packets to each other. If a critical error occurs and health monitoring detects a service instance failure, or if the heartbeat is missed six times successively, the RISE channel becomes nonoperational.
Cisco Nexus 7000 Series switches (dedicated), the active appliance is connected to one Cisco Nexus 7000 Series chassis and the standby appliance is connected to the second chassis. This deployment ensures that even if one of the switches goes down, there is minimal disruption in the traffic.
Virtualization Virtualization When the Cisco Nexus Series switch and the appliance are deployed in a RISE integration, the virtual device context (VDC) on the switch collapses multiple logical networks within a single physical infrastructure. The appliance creates virtual contexts on the single physical appliance that is connected to the VDCs on the switch.
Page 18
Cisco RISE Integration Overview Virtualization Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
C H A P T E R Preparing for RISE Integration This chapter describes how to install and connect the appliances and the Cisco Nexus 7000 Series switches before deploying the Remote Integrated Service Engine (RISE) features. This chapter includes the following sections: •...
Page 20
Figure 2: Direct Connect Mode for the Appliance and a Standalone Switch Indirect Connect Mode In an indirect mode deployment, a virtual service appliance is connected to a Cisco Nexus Series switch through a switched Layer 2 network. The topology in the following figure is for an indirect mode deployment.
Page 21
Series switch that is a vPC peer. The following figure shows the topology for a vPC direct mode deployment. Figure 4: vPC Direct Connect Mode for Connecting to vPC Peer Switches Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Preparing for RISE Integration Licensing for Cisco RISE In a vPC indirect mode deployment, the service appliance is indirectly attached to a Cisco Nexus vPC peer through a Layer 2 network. The following figure shows the topology for a vPC indirect mode deployment.
For installation and configuration information, see the Cisco Nexus 7000 Series configuration guides Note Step 1 Install the Cisco Nexus 7000 Series switches and perform the basic setup such as applying the required licenses. For switch hardware installation instructions, see the Cisco Nexus 7000 Series Hardware Installation and Reference Guide. Step 2...
After the appliance is securely mounted on the rack, you are ready to connect the cables. Ethernet cables and the optional console cable are connected first. Connect the power cable last. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
C H A P T E R Configuring RISE This chapter describes how to configure the Remote Integrated Service Engine (RISE) feature on the Cisco Nexus Series switches and the Cisco NetScaler Application Delivery Controller (ADC) appliance. The Cisco NX-OS software supports the Cisco Nexus Series switches, which includes the Cisco Nexus Series switches.
RISE Integration” chapter for information on connecting the Cisco NetScaler Application Delivery Controller (ADC) appliance. • For direct connect mode, create an interface or port channel on the Cisco Nexus Series switch and add all relevant management and data VLANs for the NetScaler Application Delivery Controller (ADC) appliance.
• VLANs cannot be shared across virtual device contexts (VDCs) in a RISE deployment. • After the RISE service is enabled on the Cisco Nexus Series switch, a service vlan-group must be created and associated to the RISE service to specify the data VLANs to be used on the Citrix NetScaler Application Delivery Controller (ADC) appliance.
Note If you are using the direct connect mode to connect the appliance to the Cisco Nexus switch, you are not required to access the Citrix Netscaler Application Delivery Controller (ADC) appliance to configure RISE. For direct connect mode, the IP address and VLAN for management are pushed from the Cisco Nexus switch as part of RISE simplified provisioning.
Log on by using the administrator credentials. For initial configuration, use nsroot as both the username and password. For example: login as: nsroot Using keyboard-interactive authentication. Password: Last login: Tue Jun 16 10:37:28 2009 from 10.102.29.9 Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
If your workstation does not already have a supported version of the Java runtime plug-in installed, the NetScaler prompts you to download the Java Plug-in. After the download is complete, the configuration utility page appears. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Cisco Nexus switch. Figure 6: Direct Connect Mode for the Appliance and a Standalone Switch This task describes how to configure a standalone Cisco Nexus switch in a direct mode deployment. After Note configuring the Cisco Remote Integrated Services Engine (RISE) on the Cisco Nexus Series switch, the appliance that is directly connected to the standalone switch is automatically configured for RISE mode and all of its ports are in operation mode.
Page 32
• Ensure that all of the switch ports to which the appliance is connected are dedicated to the appliance. • Make sure that you are in the correct VDC on the Cisco Nexus switch. To switch VDCs, use the switchto vdc command.
Page 33
• From 396 to 427 for VDC 4 • You can enter up to 32 alphanumeric characters for the RISE service module name. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
In an indirect mode deployment, a virtual service appliance, such as Citrix NetScaler Application Delivery Controller (ADC) appliance, is connected to a Cisco Nexus Series switch through a switched Layer 2 network. The topology in the following figure is for an indirect mode deployment.
◦ The number and range of the VLAN group for the Citrix NetScaler Application Delivery Controller (ADC) appliance. • Make sure that you are in the correct VDC on the Cisco Nexus switch. To switch VDCs, use the switchto vdc command.
Page 36
• You can enter up to 32 alphanumeric characters for the RISE service module name. • After you enter the password, you can access the Citrix NetScaler Application Delivery Controller (ADC) appliance to configure it. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
The following example shows how to configure the NSIP using the CLI: set ns config -ipaddress 10.102.29.60 -netmask 255.255.255.0 add ns ip 10.102.29.61 255.255.255.0 -type snip Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
• Create a port channel on the Citrix NetScaler Application Delivery Controller (ADC) appliance and map its physical ports to this port channel. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Delivery Controller (ADC) appliance, are each connected to separate Cisco Nexus Series switches that are in vPC mode through a peer link. This is the recommended topology for deploying the RISE feature on a Cisco Nexus switch and a Citrix NetScaler Application Delivery Controller (ADC) appliance.
Repeat these steps to configure each vPC peer switch to which an appliance is connected. Before You Begin • Enable and configure the Cisco Nexus switches as vPC peers. See the Cisco Nexus Series NX-OS Interfaces Configuration Guide for information. The following parameters must be the same on both Cisco Nexus switches: ◦...
Page 41
Configuring RISE in a vPC Direct Mode Deployment ◦ The number and range of the VLAN group for the ADC appliance • Make sure that you are in the correct VDC on the Cisco Nexus switch. To switch VDCs, use the switchto vdc command.
Page 42
Displays the RISE configuration status on the Cisco Nexus Series switch. If RISE is configured on the switch, the state that is displayed is “active.” Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
In a vPC indirect mode deployment, the service appliance, such as Citrix NetScaler Citrix Netscaler Application Delivery Controller (ADC) appliance, is indirectly attached to a Cisco Nexus vPC peer through a Layer 2 network. The following figure shows the topology for a vPC indirect mode deployment.
Page 44
Configuring RISE Configuring RISE in a vPC Indirect Mode Deployment • Make sure that you are in the correct VDC on the Cisco Nexus switch. To switch VDCs, use the switchto vdc command. DETAILED STEPS Command or Action Purpose Step 1 switch# configure terminal Enters global configuration mode.
Configuring NSIP Using the CLI You can configure the NSIP on your appliance by using either the configuration prompts or the command-line interface (CLI). Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 46
The following example shows how to configure the NSIP using the CLI: set ns config -ipaddress 10.102.29.60 -netmask 255.255.255.0 add ns ip 10.102.29.61 255.255.255.0 -type snip add route 0.0.0.0 0.0.0.0 10.102.29.1 save ns Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
You must reboot the appliance for the configuration to take effect. Note Step 2 (Optional) show ns config set ns config -nsvlan 300 -ifnum 1/1 1/2 1/3 -tagged NO save config Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
The NetScaler uses health probes together. When a VIP becomes unavailable, NetScaler withdraws the RHI information. Once the Service Card (SC) Engine on the Cisco Nexus 7000 Series switch receives the RHI advertised messages from the Intelligent Service Card Client (ISCC) residing on the NetScaler appliance, the switch updates its routing tables to reflect the new route in the RHI message.
The details of route modification are transparent to the ISCM. Verifying the RISE Configuration To display the RISE configuration on the Cisco Nexus Series switch, perform one of the following tasks. For detailed information about the fields in the output from these commands, see the “Cisco NX-OS RISE Note Commands”...
Page 50
: LA/1 : 10/3 10/4 Service Name : mpx4 Status : Active Mode : vPC-Direct Device Id : FOC1751R0QV Slot Number : 300 VDC Id Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Done Verifying the ISCM Configuration To display the ISCM configuration on the Cisco Nexus Series switch, perform one of the following tasks. For detailed information about the fields in the output from these commands, see the “Cisco NX-OS RISE Note Commands”...
Page 52
Total: 115746 57877 Service name: Emu -------------------------------- -------- -------- Opcode -------------------------------- -------- -------- RISE_OPC_SVC_RHI RISE_OPC_SVC_RHI_BULK RISE_OPC_SVC_APBR RISE_OPC_SVC_APBR_BULK RISE_OPC_SVC_DISCOVERY 58895 58895 RISE_OPC_SVC_BOOTSTRAP_CONFIRM 58895 RISE_OPC_SVC_PORT_STATUS Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 53
Curr alloc: 364 Curr alloc bytes: 39020(38k) Private Mem stats for UUID : libsdwrap(115) Max types: 22 -------------------------------------------------------------------------------- Curr alloc: 34 Curr alloc bytes: 1149192(1122k) Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
: N/A Configuration Examples for RISE Example: RISE Direct Mode Deployment This example shows how to configure a RISE service on a standalone Cisco Nexus Series switch that is connected directly to a Citrix Netscaler Application Delivery Controller (ADC) appliance. Note...
Example: RISE Indirect Mode Deployment Example: RISE Indirect Mode Deployment This example shows how to configure a RISE service on the Cisco Nexus Series switch that is connected to a Citrix Netscaler Application Delivery Controller (ADC) appliance through a Layer 2 network:...
Cisco Nexus Series NX-OS High Availability and Redundancy Guide Series switches Feature History for RISE The following table lists the feature history for this feature. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 58
This feature was introduced on the Cisco Nexus 7000 Series NX-OS switches. 6.2(2a) Citrix This feature was introduced on the Citrix Netscaler Application Netscaler Delivery Controller (ADC) appliance 10.1.e Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
“New and Changed Information” chapter or the Feature History table below. Information About Auto Policy-Based Routing This section includes the following topics: Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
PBR rules. After the RISE appliance applies the required configuration, the appliance sends auto PBR (APBR) messages to the Cisco Nexus switch including a list of servers (IP addresses, ports, and protocol) and the next-hop IP address of the appliance.
Page 61
Nexus Series switch. Figure 10: Two Appliances, Two VDCs, One Switch • Each appliance is connected to a different Cisco Nexus switch and each switch is in virtual port channel (vPC) mode through a peer link. Figure 11: Two Appliances, Two vPC Peer Switches...
Licensing for Cisco RISE • Two appliances are each connected to a different VDC in the same Cisco Nexus Series switch. In each of the preceding topologies, one appliance is active and the other is in standby. Each connection acts as a separate service and is unaware of the other service.
Step 1 (Optional) > enable feature RISE This step is only required if you did not enable RISE when you configured Cisco RISE with Citrix Netscaler. See the “Configuring Rise” chapter. Enables the RISE feature on the appliance.
(APBR). The Citrix Netscaler Application Delivery Controller (ADC) appliance automatically adds the appropriate rules to the Cisco Nexus switch for APBR. Before You Begin Make sure that you are in the correct VDC on the Cisco Nexus switch. To switch VDCs, use the switchto vdc command. DETAILED STEPS...
Click OK. In the Warning dialog box, click OK. The configuration takes effect after the Citrix NetScaler Application Delivery Controller (ADC) appliance is restarted. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
• Create a port channel on the Citrix NetScaler Application Delivery Controller (ADC) appliance and map its physical ports to this port channel. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Delivery Controller (ADC) appliance is restarted. Enabling the USIP Option APBR rules are configured on the Cisco Nexus Series switch by the Citrix Netscaler Application Delivery Controller (ADC) appliance when the Use Source IP (USIP) option is enabled. Perform only one of the...
Step 1 > add serviceGroup service_name protocol-type port_number [-usip [yes | no] Creates a service group and enables the USIP option. The RISE appliance sends multiple APBR messages to the Cisco Nexus device. The protocol-type argument specifies a supported protocol including but not limited to the following keywords: dns, http, ssl, tcp, or udp.
USIP option is set because the setting is inherited from the global configuration: > enable ns mode USIP Done > add service svc_gl 192.168.12.72 http 80 Done Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
: HTTP Nexthop IP : 192.168.4.100 VLAN 5) Entity Name : sg2 Entity Type : ServiceGroup Server IP : 192.168.13.202 Server Port : 102 Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 71
• APBR rule successfully Deleted—The APBR rule was deleted on the Cisco Nexus device. • APBR rule fixed by Admin—The admin has fixed the discrepancy on the Cisco Nexus device. • APBR rule not configured due to Timeout—The APBR rule was not configured even after retries.
Page 72
ISSU : None Interface : N/A To display the auto policy-based routing (APBR) configuration on the Cisco Nexus Series switch and verify that the APBR policy was added, perform one of the following tasks on the switch: Command Purpose Displays information about the APBR service.
64301 100.0.1.4 Vlan100 100.0.1.5 21743 100.0.1.6 Vlan100 Feature History for Auto Policy-Based Routing The following table lists the feature history for this feature. Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 74
Cisco Support for this feature was introduced on the Cisco Nexus 7000 (APBR) NX-OS Series switches. 6.2(8) Appliance high availability APBR on vPC Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
This chapter includes the following topics: Interpreting System Messages For information on error and system messages for the Cisco Nexus 7000 Series switch, see the Cisco MDS 9000 Family and Nexus 7000 Series NX-OS System Messages Reference. For information on system messages for the Citrix NetScaler Application Delivery Controller (ADC) appliance,...
VLAN list: 121,222-224,231-234 Displays the detailed RISE configuration status on the Cisco Nexus Series switch. The output shows the state of the RISE service. If the service is inactive, the Inactive Reason field explains the reason for this state. The following reasons might appear in the Inactive Reason field in the output of the show rise detail command: •...
If the service is Inactive, it means that the RISE channel was not established or is no longer connected. RISE-mpx> show rise profile ProfileName: profile_331 IPAddress: 3.101.0.10 Mode: Direct Status: Active VdcId: SlotNumber: Vlan: VlanGroupId: Ifnum: LA/1 Done Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...
Page 78
Troubleshooting RISE Integration Troubleshooting the RISE Service on the Appliance Cisco Remote Integrated Service Engine for Citrix NetScaler Appliances and Cisco Nexus 7000 Series Switches Configuration Guide...