[THIN] Re: NFuse Newbie needs help.
- From: "Stansel, Paul" <Paul.Stansel@xxxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Mon, 9 Jun 2003 09:46:44 -0400
If you are just using NFuse, your Metaframe servers have to be either given
their own external address (a real number in your external IP range that you
map to the internal address via NAT) or their own port (I don't do this one,
and can't give you any good advice). Your external clients will be given
that external IP address when they request an application, your firewall
will translate the NAT and pass it to your internal servers, and back out
again.
Once you go with CSG, your MF servers no longer need that external address.
The gateway (or whatever the heck it's called in 2.0) sits hopefully in the
DMZ and handles all communications between the external and internal. You
will still need to have it and the NFuse server NATed correctly of course,
but there will be no need for altaddrs.
Let me know if that made no sense :)
-Paul
> ----------
> From: Stuart Pittwood[SMTP:SPittwood@xxxxxxxxxxxxxxxxx]
> Reply To: thin@xxxxxxxxxxxxx
> Sent: Monday, June 09, 2003 9:40 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: NFuse Newbie needs help.
>
> So the alternate address would be the address that ICA is published to
> on the internal firewall?
>
> For example the internal firewall has two published metaframe servers on
> 192.168.1.12 & .13.
>
> & yes I'm just using Nfuse, CSG will be my next "project"
>
> -----Original Message-----
> From: Stansel, Paul [mailto:Paul.Stansel@xxxxxxxxxxxxx]=20
> Sent: 09 June 2003 14:37
> To: 'thin@xxxxxxxxxxxxx'
> Subject: [THIN] Re: NFuse Newbie needs help.
>
> Assuming you are just using Nfuse, correct? Did you specify an ip
> address
> range to use the altaddr? Your internal boxes should use the internal
> address of the MF servers, your external boxes should use your altaddr,
> and
> the DMZ boxes may be one or the other. It really depends on whether
> they
> can resolve the box with it's internal address.
>
> > ----------
> > From: Stuart Pittwood[SMTP:SPittwood@xxxxxxxxxxxxxxxxx]
> > Reply To: thin@xxxxxxxxxxxxx
> > Sent: Monday, June 09, 2003 9:30 AM
> > To: thin@xxxxxxxxxxxxx
> > Subject: [THIN] NFuse Newbie needs help.
> >=20
> > Hi all,
> > =20
> >=20
> > I'm playing around with Nfuse as if I can get it to work it will solve
> > all of our remote access problems.
> >=20
> > =20
> >=20
> > We have a back to back DMZ using MS ISA server on both sides.
> >=20
> > =20
> >=20
> > Both firewalls are doing NAT.
> >=20
> > =20
> >=20
> > Nfuse is installed on an IIS box in the DMZ.
> >=20
> > =20
> >=20
> > If I access Nfuse (using its external IP address) from a client which
> is
> > on the internal network all is happy & it works perfectly.
> >=20
> > =20
> >=20
> > If I access Nfuse from within the DMZ or the internet, I am able to
> log
> > in and see the list of published apps (so I assume XML communication
> is
> > working) but when I try to launch an application nothing happens. The
> > web ICA client is installed on the box I'm accessing from.
> >=20
> > =20
> >=20
> > Am I correct in thinking that when I launch an app the client is
> talking
> > directly with the metaframe box using TCP 1494.
> >=20
> > =20
> >=20
> > I can telnet into the metaframe box from the client on port 1494 & see
> > the ICA banner.
> >=20
> > =20
> >=20
> > Do any other ports need opening?
> >=20
> > =20
> >=20
> > Any help appreciated
> >=20
> > =20
> >=20
> > Oh and it's Nfuse 1.7 & Metaframe XPa FR2, IIS 5, Win2k SP3. The only
> > other thing installed on the web server is Progress webspeed.
> >=20
> > =20
> >=20
> > _________________________
> >=20
> > Stuart Pittwood, CCNA, MCSE
> >=20
> > IT Technician
> >=20
> > Amery-Parkes Solicitors
> >=20
> > =20
> >=20
> >=20
> > ********************************************************
> > This Week's Sponsor - Appsense Technologies
> > New! AppSense Optimizer is a new product from AppSense=20
> > designed to increase the user capacity of your servers.=20
> > http://www.appsense.com/
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thethin.net/links.cfm
> >=20
> > For Archives, to Unsubscribe, Subscribe or=20
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> >=20
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense=20
> designed to increase the user capacity of your servers.=20
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or=20
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense
> designed to increase the user capacity of your servers.
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
