ADC

Change an RPC node password

October 12, 2023

Contributed by:

B S

To communicate with other NetScaler appliances, each appliance requires knowledge of the other appliances, including how to authenticate on NetScaler appliance. RPC nodes are internal system entities used for system-to-system communication of configuration and session information. One RPC node exists on each NetScaler appliance and stores information, such as the IP addresses of the other NetScaler appliance and the passwords used for authentication. The NetScaler appliance that contacts the other NetScaler appliance checks the password within the RPC node.

Note:

After you upgrade a NetScaler appliance to release 13.1 build 33.x or later from one of the following builds, the secure option for the RPC node is enabled or disabled on the basis of the TLS 1.2 setting (enabled or disabled) present for the internal RPCS and KRPCS services.

Release 13.0 build 64.35 or earlier

Release 12.1 build 61.18 or earlier

The RPC communication is encrypted between the NetScaler nodes of the following setups if the Secure option is enabled:

High availability

Cluster

GSLB

The secure option uses secure protocol TLS1.2 and port numbers 3008 and 3009 for the RPC connection between the NetScaler nodes.

For ensuring secure RPC communication, Citrix recommends performing the following operations before upgrading these setups:

TLS 1.2 must be enabled for the internal RPCS and KRPCS services:

nsrpcs-127.0.0.1-3008

nskrpcs-127.0.0.1-3009

nsrpcs-::1l-3008

3008 and 3009 must be unblocked in firewalls between the NetScaler nodes.

You can enable or disable the secure option using the NetScaler CLI or the GUI.

To change an RPC node password by using the GUI

Navigate to System > Network > RPC.
In the RPC pane, select the node and then click Edit.
In Configure RPC Node, type the new password.
In Source IP Address, type the existing node’s IP address to be used to communicate with the peer system node.
Select Secure and then click OK.

Note

For enhanced security, Citrix recommends you to enable the Secure option on RPC nodes. When you enable the Secure option, the appliance encrypts all the RPC communication sent from one ADC node to other ADC nodes thus securing the RPC communication. This secure communication uses the port number 3008. If the firewall between the ADC nodes blocks the port number 3008, unblock it and proceed. Otherwise, configuration synchronization and configuration propagation might fail.

To change an RPC node password by using the CLI

At the command line, type the following commands:

set ns rpcNode <IPAddress> {-password} [-secure ( YES | NO )]
show ns rpcNode
<!--NeedCopy-->

Example:

> set ns rpcNode 192.0.2.4 -password mypassword -secure YES
 Done
> show rpcNode
.
.
.
 IPAddress:  192.0.2.4 Password:  d336004164d4352ce39e
     SrcIP:  *           Secure:  ON
Done
>

<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Change an RPC node password

October 12, 2023

Contributed by:

B S

October 12, 2023

Contributed by:

B S

Change an RPC node password

To change an RPC node password by using the GUI

To change an RPC node password by using the CLI

In this article