Administrators cannot manage NetScaler instance from SDX. NetScaler VPX instance state shows Red while the VM state shows Green from SVM GUI.

The deployment wizard is not fully functional.

SSH and logon to VPX GUI from a different network works but you cannot ping the VPX management IP from SVM.

A traceroute to the management IP of VPX from SVM also does not work. 

Complete the following steps to troubleshoot this issue:

1. The admin profile that was used to provision the VPX during initial deployment might not be valid anymore. This would happen if changes are made to the admin profile (changes to password on the VPX instance directly). In such cases you will be able to login directly to VPX however the SVM will show the instance as down.

   Verify if you have modified the nsroot password for the admin profile from VPX level. If yes, then modify the admin profile account that was used for the VPX instance when provisioning from the SVM level. 

   If SVM does not allow you to change the admin profile (which can be possibility as the instance state is DOWN on SVM for that VPX). Then  the connect through console to the VPX from the XenServer CLI. Once logged in to the CLI, use the "set system user nsroot -password <password>" command and revert the password to the original password that was used in the admin profile bound in SVM.

   Instance state RED means SVM is not able to contact/reach VPX.

2. Look for any VLAN bindings for the NSIP. After confirming that there are VLANs configured, configure the VLAN binding for the VPX from the console and verify if the VPX comes UP.

3. In some scenarios during initial deployments, it can be a case that such issues occur due to the fact that management plane has been hosted in a different VLAN and we do not have the right set of networking configuration at the instance level to allow such traffic.