Configure IPv6 for ICA connections

NetScaler Gateway supports IPv6 addresses for ICA connections. Connections with IPv6 to the Web Interface or StoreFront work the same as IPv4 connections. When users connect by using the NetScaler Gateway web address, NetScaler Gateway proxies the connection to the Web Interface or StoreFront.

You can configure IPv6 for NetScaler Gateway deployed in one DMZ or deployed in a double-hop DMZ.

You enable IPv6 on NetScaler Gateway by using the command line. You can use the following guidelines:

  • Enable IPv6 on the appliance.

  • Configure subnet IP addresses.

  • Set the DNS resolution order.

  • Set the Web Interface or StoreFront web address.

  • Bind the Secure Ticket Authority (STA) to NetScaler Gateway.

By default, the mapped IP address does not support IPv6 addresses. To route user communications to the internal network, you need to create subnet IP addresses and then and configure NetScaler Gateway to use the subnet IP addresses.

If you deploy multiple IPv6 subnets in your network, create multiple IPv6 subnet IP address on NetScaler Gateway, on for each subnet in your network. Network routing sends the IPv6 packets to the respective subnets by using the subnet IP addresses.

To configure IPv6 for ICA Proxy by using the CLI

  1. Log on to NetScaler Gateway by using a Secure Shell (SSH) connection, such as from PuTTY. At the command prompt, type;

    enable ns feature IPv6PT. This enables IPv6.
    enable ns mode USNIP.
    set dns parameter –resolutionOrder AAAAThenAQuery AThenAAAAQuery OnlyAAAAQuery OnlyAQuery
    set vpn parameter -wihome `http://XD_domain/Citrix/StoreWeb`

Where is either the domain name or IP address of StoreFront.


set vpn parameter -wihome ``.


set vpn parameter -wihome `http://[1000:2000::3000]/Citrix/StoreWeb`


If you use the IPv6 address to configure this parameter, the IP address must be contained in brackets.

Configure IPv6 for ICA connections