Gateway

Configuring IPv6 for ICA Connections

January 8, 2024

Contributed by:

C S C

Citrix Gateway supports IPv6 addresses for ICA connections. Connections with IPv6 to the Web Interface or StoreFront work the same as IPv4 connections. When users connect by using the Citrix Gateway web address, Citrix Gateway proxies the connection to the Web Interface or StoreFront.

You can configure IPv6 for Citrix Gateway deployed in one DMZ or deployed in a double-hop DMZ.

You enable IPv6 on Citrix Gateway by using the command line. You can use the following guidelines:

Enable IPv6 on the appliance.
Configure subnet IP addresses.
Set the DNS resolution order.
Set the Web Interface or StoreFront web address.
Bind the Secure Ticket Authority (STA) to Citrix Gateway.

By default, the mapped IP address does not support IPv6 addresses. To route user communications to the internal network, you need to create subnet IP addresses and then and configure Citrix Gateway to use the subnet IP addresses.

If you deploy multiple IPv6 subnets in your network, create multiple IPv6 subnet IP address on Citrix Gateway, on for each subnet in your network. Network routing sends the IPv6 packets to the respective subnets by using the subnet IP addresses.

To configure IPv6 for ICA proxy

To configure IPv6 for ICA proxy:

Log on to Citrix Gateway by using a Secure Shell (SSH) connection, such as from PuTTY.
At the command prompt, type enable ns feature IPv6PT. This enables IPv6.
At the command prompt, type enable ns mode USNIP. This enables the use of the subnet IP addresses.
At the command prompt, type: set dns parameter –resolutionOrder AAAAThenAQuery AThenAAAAQuery OnlyAAAAQuery OnlyAQuery
At the command prompt, type: set vpn parameter -wihome http://XD_domain/Citrix/StoreWeb.

Where is either the domain name or IP address of StoreFront.

For example, set vpn parameter -wihome http://storefront.domain.com/Citrix/StoreWeb.

set vpn parameter -wihome http://[1000:2000::3000]/Citrix/StoreWeb

If you use the IPv6 address to configure this parameter, the IP address must be contained in brackets.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring IPv6 for ICA Connections

January 8, 2024

Contributed by:

C S C

January 8, 2024

Contributed by:

C S C

Configuring IPv6 for ICA Connections

To configure IPv6 for ICA proxy

In this article