Change an RPC node password

年代eptember 6, 2023

Contributed by:

年代 C

To communicate with other Citrix ADC appliances, each appliance requires knowledge of the other appliances, including how to authenticate on Citrix ADC appliance. RPC nodes are internal system entities used for system-to-system communication of configuration and session information. One RPC node exists on each Citrix ADC appliance and stores information, such as the IP addresses of the other Citrix ADC appliance and the passwords used for authentication. The Citrix ADC appliance that contacts the other Citrix ADC appliance checks the password within the RPC node.

Note:

After you upgrade a NetScaler appliance to release 13.1 build 33.x or later from one of the following builds, thesecureoption for the RPC node is enabled or disabled on the basis of the TLS 1.2 setting (enabled or disabled) present for the internal RPCS and KRPCS services.

Release 13.0 build 64.35 or earlier

Release 12.1 build 61.18 or earlier

The RPC communication is encrypted between the NetScaler nodes of the following setups if thesecureoption is enabled:

High availability

Cluster

GSLB

Thesecure选项使用安全协议TLS1.2和端口号s 3008 and 3009 for the RPC connection between the NetScaler nodes.

For ensuring secure RPC communication, Citrix recommends performing the following operations before upgrading these setups:

TLS 1.2 must be enabled for the internal RPCS and KRPCS services:

nsrpcs-127.0.0.1-3008

nskrpcs-127.0.0.1-3009

nsrpcs-::1l-3008

3008 and 3009 must be unblocked in firewalls between the NetScaler nodes.

You can enable or disable thesecureoption using the NetScaler CLI or the GUI.

To change an RPC node password by using the GUI

Navigate to年代ystem>Network>RPC.
In theRPCpane, select the node and then clickEdit.
InConfigure RPC Node, type the new password.
In年代ource IP Address, type the existing node’s IP address to be used to communicate with the peer system node.
年代elect年代ecureand then clickOK.

Note

For enhanced security, Citrix recommends you to enable the年代ecureoption on RPC nodes. When you enable the年代ecureoption, the appliance encrypts all the RPC communication sent from one ADC node to other ADC nodes thus securing the RPC communication. This secure communication uses the port number 3008. If the firewall between the ADC nodes blocks the port number 3008, unblock it and proceed. Otherwise, configuration synchronization and configuration propagation might fail.

To change an RPC node password by using the CLI

At the command line, type the following commands:

set ns rpcNode  {-password} [-secure ( YES | NO )] show ns rpcNode

Example:

              > set ns rpcNode 192.0.2.4 -password mypassword -secure YES Done > show rpcNode . . . IPAddress: 192.0.2.4 Password: d336004164d4352ce39e SrcIP: * Secure: ON Done > 
             

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Change an RPC node password

年代eptember 6, 2023

Contributed by:

年代 C

年代eptember 6, 2023

Contributed by:

年代 C

Change an RPC node password

To change an RPC node password by using the GUI

To change an RPC node password by using the CLI

In this article