IBM Cloud Docs
Configuring IPsec site-to-site VPN in Citrix Netscaler VPX with IBM Virtual Router Appliance

Configuring IPsec site-to-site VPN in Citrix Netscaler VPX with IBM Virtual Router Appliance

This guide provides step-by-step instructions to configure an IPsec VPN site-to-site connection in the Citrix Netscaler VPX. An IBM Virtual Router Appliance (VRA) is used as a VPN peer.

IPsec VPN Connection
IPsec VPN connection

About the deployment

This deployment was built and tested with the following component specifications:

Component specifications
NetScaler VPX Version & Build VRA Version & Description
NS12.1: Build 48.13.nc AT&T vRouter 5600 1801q

You need a VPX Platinum license to configure IPsec VPN.

Before you begin

This guide assumes ownership of both devices. Visit the following links for instructions on ordering.

What you can accomplish

In this guide you learn how to configure an IPsec VPN in the Citrix VPX device.

What you'll accomplish
Task Description
Enable Features in VPX First, enable the required features to create the IPsec VPN.
Create IPsec Profile The IPsec profile includes security parameters for establishing the connection.
Create IP Tunnel In this section, you create an IP tunnel object to specify both local and remote IP addresses, as well as protocol parameters.
Create Policy Based Routing (PBR) PBR is used to define the unique traffic parameters for both local and remote subnets.
Configure VRA Configure the Virtual Router Appliance, by using equivalent VPN configuration syntax.
Verify VPN Status Verify the VPN operation state and conduct a simple connectivity test.

Extra resources

The following extra resources can help you learn more about Citrix VPX and Virtual Router Appliance.