NetScaler Policy Binding Lost After Appliance Reboot
Article ID: CTX214714
Updated On:
Description
After NetScaler VPX appliance is rebooted - some of the VPN policy bindings are lost (even configuration was saved before the reboot).
Reviewing the ns.log file covering the time of the boot and config load - following error line is seen/accompanied by config lines which are failing to load:
nsconfigd: _dispatch(): Failing command: "set vpn parameter -proxy OFF -forceCleanup none -clientOptions services configuration -clientConfiguration all -UITHEME CUSTOM"
nsconfigd: _dispatch(): RPC timeout
nsconfigd: _dispatch(): Failing command: "bind aaa group ..."
nsconfigd: _dispatch(): RPC timeout
nsconfigd: protocol error: expecting command NSAPI_BIND2AAAGROUP, but received NSAPI_SET_VPNPARAM
nsconfigd: _dispatch(): Communication error (RPC data-size mismatch)
Resolution
Fix provided in the NetScaler Release 10.5 Build 59.11, available for download at:
https://download.citrix.com/downloads/netscaler-adc/firmware/release-105-build-5911.html
Problem Cause
Software BUG investigated under issue ID :[# 524055, 576330, 576582]
From Release Notes: https://download.citrix.com/content/dam/citrix/en_us/documents/downloads/netscaler-adc/NS_10_5_59_11.html
Some AAA bindings are not found in the running configuration on rebooting VPX on ESX platform. However, these bindings are present in the ns.conf configuration file. This happens when the VPN virtual server's parameter UITHEME is set to CUSTOM. This issue is specific to VPX on ESX only.Issue/Introduction
