Application Delivery Management

Shared VLAN support for admin partitions

December 31, 2023

Contributed by:

For tenants connecting from private networks, the Citrix Application Delivery Management (ADM) supports isolation policy so that each tenant has its own dedicated partition, a dedicated VLAN, and dedicated servers. For tenants connecting from public networks, a dedicated VLAN will require too many IP addresses to be used. A shared VLAN circumvents this problem by creating one virtual IP address on each partition thus creating a single IP subnet.

Shared VLAN architecture

When an tenant configures a VIP or a listener, an admin partition is created in the Citrix ADC device for that tenant. All load balancer configuration is pushed to that admin partition that is created. If the tenant is using a shared network or an external network to create a load balancer, then the VLAN of that network is added and the sharing feature is enabled. When a different tenant uses the same shared network to create its load balancer, the VLAN is not added to the Citrix ADC again, but the VLAN will be bound to the second partition as well. Thus, any tenant who uses the same shared network gets a partition which is bound to the same VLAN.

The Citrix ADM supports virtual destination MAC address. When tenants share a VLAN, the Citrix ADM assigns different MAC addresses to the partition on the Citrix ADC device. This allows a VLAN to be shared across partitions or across all tenants and all traffic domains.

Configuring Shared VLAN from Citrix ADC Instance

In a Citrix ADC instance, navigate to Configuration > System > Network > VLANs, select a VLAN profile, and click Edit to set the partition sharing parameter.
On the Configure VLAN page, select the Partitions Sharing check box.
Click OK.

Configuring Shared VLAN from OpenStack Orchestration

In OpenStack, navigate to Admin > System > Networks, and then click Create Network.
In Create Network, set the following parameters:
1. Name - enter the name of the network
2. Project - select a project form the drop-down list
3. Provider Network Type - select VLAN from the drop-down list. This defines that the virtual network is established as VLAN.
4. Physical Network - the default physical network is selected here. You can edit this.
5. Admin State - by default, the administrative state of the network is UP
6. Select Shared and External Network to define that the VLAN is shared and is using an external network.
Click Create Network.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Shared VLAN support for admin partitions

December 31, 2023

Contributed by:

December 31, 2023

Contributed by:

Shared VLAN support for admin partitions

Configuring Shared VLAN from Citrix ADC Instance

Configuring Shared VLAN from OpenStack Orchestration

In this article