Configure clustering
To configure clustering, configure the following two load balancing virtual IP addresses on Citrix ADC.
- 移动设备的人agement (MDM) load balancing virtual IP address:An MDM load balancing virtual IP address is required to communicate with the XenMobile nodes that are configured in a cluster. This load balancing is done in SSL Bridge mode.
- Mobile app management (MAM) load balancing virtual IP address:MAM load balancing virtual IP addresses are required for Citrix Gateway to communicate with XenMobile nodes that are configured in a cluster. In XenMobile, by default, all traffic from Citrix Gateway routes to the load balancing virtual IP address on port 8443.
The procedures in this article explain how to create a new XenMobile virtual machine (VM) and joining the new VM to an existing VM. Those steps create a cluster setup.
Prerequisites
- You have fully configured the required XenMobile node.
- Configure NTP on all cluster nodes and the XenMobile database. For clustering to work properly, all of those servers must have the same time.
- One public IP address for MDM load balancer and one private IP address for MAM.
- Server certificates.
- One free IP for Citrix Gateway virtual IP address.
- With XenMobile deployed in a cluster setup and in MDM-only or Enterprise mode (MDM+MAM): Modify your Citrix ADC load balancer configuration to useSource IP persistencefor all Citrix ADC MDM load balancers, that is, virtual servers set up for ports 8443 and 443. Complete that configuration before user devices upgrade to iOS 11. For more information, see this Citrix Knowledge Center article:https://support.citrix.com/article/CTX227406.
- To install apps from the XenMobile Store on iOS 11 devices, you must enable port 80 on XenMobile Server.
For reference architectural diagrams for XenMobile 10.x in clustered configurations, seeArchitecture.
Installing the XenMobile Cluster Nodes
Based on the number of nodes you require, you create XenMobile VMs. You point the new VMs to the same database and provide the same PKI certificate passwords.
Open the command-line console of the new VM and enter the new password for the administrator account.
Provide the network configuration details as shown in the following figure.
If you want to use the default password for data protection, typey; or, typenand enter a new password.
If you want to use FIPS, typey; or, typen.
Configure the database so that you point to same database that the earlier fully configured VM pointed to. You see the message: Database already exists.
Enter the same passwords for the certificates that you provided for the first VM.
After you have entered the password, the initial configuration on second node will complete.
When the configuration is complete, the server restarts and the logon dialog box appears.
Note:
The logon dialog box is identical to the logon dialog box of the first VM. The match is a way for you to confirm that both VMs are using the same database server.
Use the fully qualified domain name (FQDN) of XenMobile to open the XenMobile console in a web browser.
In the XenMobile console, click the wrench icon in the upper-right corner of the console.
TheSupportpage opens.
UnderAdvanced, clickCluster Information.
All of the information about the cluster, including cluster member, device connection information, tasks, and so on, appear. The new node is now a member of the cluster.
You can add other nodes by following the same steps. The first node added to the cluster has a Role ofOLDEST. Nodes added after that show a Role ofNONEornull.
To configure load balancing for the XenMobile cluster in Citrix ADC
After you add the required nodes as members of the XenMobile cluster, load balance the nodes so you can access the clusters. Load balancing is done by running XenMobile Wizard available in Citrix ADC. The following steps describe how to load balance XenMobile by running the wizard.
Log on to Citrix ADC.
On the Configuration tab, clickXenMobileand then clickGet Started.
Select theAccess through Citrix Gatewaycheck box and theLoad Balance XenMobile Serverscheck box and then clickContinue.
Enter the IP address for Citrix Gateway and then clickContinue.
Bind the server certificate to the Citrix Gateway virtual IP address by doing one of the following and then clickContinue.
- InUse existing certificate, choose the server certificate from the list.
- Click theInstall Certificatetab to upload a new server certificate.
Enter the Authentication server details and then clickContinue.
Note:
Ensure the Server Logon Name Attribute is same as you provided in the XenMobile LDAP configuration.
Under XenMobile settings, enter the Load Balancing FQDN for MAM and then clickContinue.
Note:
Ensure the FQDN of the MAM load balancing virtual IP address and the FQDN of XenMobile are the same.
If you want to use SSL Bridge mode (HTTPS), selectHTTPS communication to XenMobile Server. However, if you want to use SSL offload, selectHTTP communication to XenMobile Server, as shown in the preceding figure. For the purposes of this article, the choice is SSL Bridge mode (HTTPS).
Bind the server certificate for the MAM load balancing virtual IP address and then click Continue.
Under XenMobile Servers, clickAdd Serverto add the XenMobile nodes.
进入XenMob的IP地址ile node and then click Add.
Repeat steps 10 and 11 to add more XenMobile nodes that are part of the XenMobile cluster. You see all the XenMobile nodes that you have added. Click Continue.
ClickLoad Balance Device Manager Serversto continue with the MDM load balancing configuration.
Enter the IP address to be used for MDM load balancing IP address and then clickContinue.
Once you see the XenMobile nodes in the list, clickContinueand then click Done to finish the process.
You see the virtual IP address status on the XenMobile page.
To confirm if the virtual IP addresses are up and running, click the Configuration tab and then navigate toTraffic Management > Load Balancing > Virtual Servers.
You also see that the DNS entry in Citrix ADC points to the MAM load balancing virtual IP address.