citrix problems over cm

[doolie]

ello all

my current setup is

CM->Linksys BEFSR41-> PC and Wireless AP

PC i'm using is hardwired to router and other clients are wireless

I'm on 1MB service. Router is running latest firmware. I'm in the Rugby area if it's of any relevance

I often work from home and i connect to one of our clients via Citrix NFUSE. I can get to their https page and login ok and get presented with the apps. BUT, whenever i try and connect to one of the apps, my ICA connection dialog box just hangs fo 3 or 4mins ? It then comes back with 'A network error caused your request to time out'. I assume it can't get to the NAT address. Now i know that it's not a problem their end cause i can get to them via dialup into another isp and also a colleague, also on ntl BB, can also connect via his service. This service always used to work for me before the last weekend.

The only change i've made this end is to move my cm, router and pc to another room in my house. I'm getting no other problems with any other service, and if it helps, i can still vpn to my workplace and use ica. i.e my ica client is fine

This problem also occurs with my wireless clients, that again, used to work. So, what can it be? Any ideas are very greatfully received

cheers, doolie

[Indians]

Sounds like the router config, check all settings, any port forwarding req'd ? try cold booting router again just in case it didn't come back up correctly.

[doolie]

Originally Posted by Indians

Sounds like the router config, check all settings, any port forwarding req'd ? try cold booting router again just in case it didn't come back up correctly.

thanks for the reply

i very much doubt port forwarding is required, besides i didn't have one before. only ports forwarded i've ever had are for dc++, messenger and when hosting lan games

i'll try a cold boot and reset of the router when i get back home, ta

if that fails, can i plug my pc straight into the cm to bypass the router or will it have that problem with the mac address already registered? (to the router)

i'm thinking it has to be the router but i simply can't understand why

[SMHarman]

Originally Posted by doolie

thanks for the reply

i very much doubt port forwarding is required, besides i didn't have one before. only ports forwarded i've ever had are for dc++, messenger and when hosting lan games

i'll try a cold boot and reset of the router when i get back home, ta

if that fails, can i plug my pc straight into the cm to bypass the router or will it have that problem with the mac address already registered? (to the router)

i'm thinking it has to be the router but i simply can't understand why

I thought the router needed a cloned MAC address so disconnecting it made no difference

[Stuart]

According to http://support.citrix.com/forums/thr...ID=54928#54928, the citrix web client needs ports 80 and 1494 opened.

If NFuse is used, the only required ports are TCP 80 to the NFuse web
server (or 443 if SSL is used to secure your web server) and TCP 1494 to
the MetaFrame server(s).

Port 1023 and above (The High Ports) are opened for TCP and UDP
outbound(if tcp/ip browsing is used).

Is it possible NTL is blocking port 1494 for some reason (it's not on the list of blocked ports I have found, but that is from October).

[doolie]

Originally Posted by scastle

According to http://support.citrix.com/forums/thr...ID=54928#54928, the citrix web client needs ports 80 and 1494 opened.

Is it possible NTL is blocking port 1494 for some reason (it's not on the list of blocked ports I have found, but that is from October).

yeah, my initial thought was the ica port but i kinda ruled that out when my colleague tested ok on his ntl bb (diff area though)

I should add that it's got nothing to do with my software f/w either since i switched that off to test

[doolie]

Originally Posted by SMHarman

I thought the router needed a cloned MAC address so disconnecting it made no difference

not quite sure what you mean, but my router isn't running with a cloned mac

[doolie]

still no success

have now rebooted router again and done a reset.

Left everything off overnight and nowplugged pc straight into cm. Still the same. f/w is off currently to ensure no problems there.

bugger

[Stuartbe]

Originally Posted by doolie

still no success

have now rebooted router again and done a reset.

Left everything off overnight and nowplugged pc straight into cm. Still the same. f/w is off currently to ensure no problems there.

bugger

A couple of things you can try m8...

1. check your hosts file - If you are using a domain name to connect this could cause a problem.

2. change the dns that you are using. You can allso try connecting via ip instead of domain name.

Very Strange !!!!

[doolie]

no hosts file in use i'm afraid

all info is passed down from the nfuse web server where i log in. That supplies me with an IP address of one of the farm servers (20 odd servers load balanced). This is a NAT address of one of the servers

That's the way i think it works anyway but i'll look into it a bit more

The only dns entry i use, as i understand it, is the web address of the nfuse server

thanks for the ideas though

I think what i'll do next is to pop round to my brothers house and try it. Similar setup and same area on ntl bb.

[doolie]

Originally Posted by doolie

no hosts file in use i'm afraid

all info is passed down from the nfuse web server where i log in. That supplies me with an IP address of one of the farm servers (20 odd servers load balanced). This is a NAT address of one of the servers

That's the way i think it works anyway but i'll look into it a bit more

The only dns entry i use, as i understand it, is the web address of the nfuse server

thanks for the ideas though

I think what i'll do next is to pop round to my brothers house and try it. Similar setup and same area on ntl bb.

had an idea

got the NAT address of one of the servers whilst dialled up and connected (from netstat -n) . what i can do now when i get home is to try and telnet to port 1494 on that ip. Will get an ica repeater back if it's getting through

sholuld have thought of that earlier!

if it don't work, at least i know it's the port and possibly ntl

[phoenix40uk]

I had almost the exact same problem a few months ago. I had to drop my MTU settings from 1500 to 1200 and it worked. Then up it a fraction at a time to see what the limit is. (I think mine was 1300).

[Greenstead]

I use Citrix thro a NAT router and NTL cable modem, no problems.(Guildford area).

No port forwarding is needed.

(And I don't use a cloned MAC address in the router, btw).

It sounds more like (your) permissions problem their end.

[doolie]

thanks for all the replies

tried the MTU suggestion (good idea btw!), nope

not a login issue as i mentioned coz i'm fine by dial-up

tried it at my brothers house and, guess what, same problem! he's on ntl cable, same area. What are the odds of us both having the same pc problem

got to be ntl surely?

[rdhw]

Originally Posted by doolie

got to be ntl surely?

How does this Citrix system actually work? You mentioned using a web-browser to launch applications. Does that system cope with transparent web proxies?