XenMobile: MAM LB Configuration

Looks like to this day the confusion still exist as to what IP Address has to be assigned to MAM LB on NetScaler which communicates with XenMobile Server. Whether this IP Address should be Internal or External? And what standard has to be followed is the objective of this Article.

Few Points to consider before configuring MAM LB:

1. Use XenMobile 10 wizard in NetScaler to configure NetScaler integration with XenMobile.
   1. This wizard will create following:
      1. Load Balancer for MDM.
      2. Gateway Virtual Server for MAM.
      3. Load Balancer for MAM.
2. Tricky part is, for Load Balancer for MDM and Gateway Virtual Server you assign External or NATted IP Address where as for Load Balancer for MAM you assign a private/internal ip address.
3. Virtual IP Address you assign for Load Balancing MAM must be as per RFC 1918 standard of private addresses.
4. Non private IP will create communication issues while in the process of authenticating resulting users could see error like " Access to your company network not currently not available".
5. Default port for MAM Load balancer is 8443.
6. NetScaler should be configured with DNS Host record for MAM LB resolving to the FQDN of the XenMobile server.
7. The load balancing FQDN for MAM must match with the XenMobile Server hostname defined during the initial configuration of XenMobile 10.
8. All traffic to the MAM load balancing virtual server is passed through NetScaler Gateway.
9. The MAM load balancing virtual server requires the same SSL certificate as the XenMobile servers.

Please refer to the additional links for complete XenMobile-NetScaler Gateway Integration and F&Q article which contains info on MAM LB.
https://support.citrix.com/article/CTX200430
http://docs.citrix.com/en-us/xenmobile/server/advanced-concepts/xenmobile-deployment/integrating-netscaler-gateway-and-netscaler.html

What IP address has to be assigned to MAM LB in XenMobile deployment?