&KDSWHU$GYDQFHG7RSLFV
,&$%URZVLQJ:LWK1HWZRUN$GGUHVV7UDQVODWLRQ
Some firewalls use IP address translation to convert private (Intranet) IP addresses
into public (Internet) IP addresses. Public IP addresses are called “external”
addresses because they are external to the firewall, whereas private IP addresses
are said to be “internal” addresses.
Hosts on the internal network have one set of addresses that is translated to
another set when passing through the firewall.
For example, an internal host has a private address 192.168.12.3. The firewall
translates this into a different public address such as 206.103.132.20.
To browse Citrix servers and published applications, the Citrix ICA Client
contacts a Citrix server and requests the address of the master ICA Browser. If the
ICA Client is external to the firewall, it must be configured to use the public
address of a Citrix server. The server returns the IP address of the current master
ICA Browser to the ICA Client. By default, the IP address returned to the ICA
Client is the internal address.
If the ICA Client is outside the firewall and the firewall is configured for address
translation, the IP address returned to the client for the master browser will be
incorrect.
5HWXUQLQJ([WHUQDO$GGUHVVHVWR,&$&OLHQWV
Use the Altaddr utility to configure the ICA Browser server to return the external
IP address to Citrix ICA Clients. You must configure every server that can be
elected as the master ICA Browser.
The Altaddr utility sets an alternate address for the ICA Browser on that machine.
The external address for the server is specified as the alternate address. The Citrix
ICA Client requests the alternate address when contacting servers inside the
firewall. The alternate address must be specified for each server in a server farm.
à To set an alternate address for a Citrix server
1. Determine the correct external IP address.
2. At a command prompt, type altaddr /set nnn.nnn.nnn.nnn, where nnn is the
alternate IP address determined in Step 1.
3. Repeat on each server.
See Appendix A, “MetaFrame Command Reference,” for more information on the
Altaddr Utility.