ADC CLI Commands

vpn-trafficAction

The following operations can be performed on “vpn-trafficAction”:

set rm add unset show

set vpn trafficAction

Modifies a traffic policy action to be applied by the policy if the rule criteria are met.

Synopsis

set vpn trafficAction [-appTimeout ] [-SSO ( ON | OFF ) | -wanscaler ( ON | OFF )] [-HDX ( ON | OFF )] [-formSSOAction ] [-fta ( ON | OFF )] [-kcdAccount ] [-samlSSOProfile ] [-proxy ] [-userExpression ] [-passwdExpression ]

Arguments

name Name of the traffic policy action to modify.

appTimeout Maximum amount of time, in minutes, a user can stay logged on to the web application. Minimum value: 1 Maximum value: 715827

SSO Provide single sign-on to the web application. NOTE : Authentication mechanisms like Basic-authentication require the user credentials to be sent in plaintext which is not secure if the server is running on HTTP (instead of HTTPS).

Possible values: ON, OFF

HDX Provide hdx proxy to the ICA traffic

Possible values: ON, OFF

formSSOAction Name of the form-based single sign-on profile. Form-based single sign-on allows users to log on one time to all protected applications in your network, instead of requiring them to log on separately to access each one.

fta Specify file type association, which is a list of file extensions that users are allowed to open.

Possible values: ON, OFF

wanscaler Use the Repeater Plug-in to optimize network traffic.

Possible values: ON, OFF

kcdAccount Kerberos constrained delegation account name Default value: “Default”

samlSSOProfile Profile to be used for doing SAML SSO to remote relying party

proxy IP address and Port of the proxy server to be used for HTTP access for this request.

userExpression expression that will be evaluated to obtain username for SingleSignOn Maximum value: 256

passwdExpression expression that will be evaluated to obtain password for SingleSignOn Maximum value: 256

rm vpn trafficAction

Removes a previously created traffic policy action.

Synopsis

rm vpn trafficAction

Arguments

name Name of the traffic policy action to remove.

add vpn trafficAction

Creates an action to be applied by a policy that matches the traffic being processed.

Synopsis

add vpn trafficAction [-appTimeout ] [(-SSO ( ON | OFF ) [-formSSOAction ]) | -wanscaler ( ON | OFF )] [-HDX ( ON | OFF )] [-fta ( ON | OFF )] [-kcdAccount ] [-samlSSOProfile ] [-proxy ] [-userExpression ] [-passwdExpression ]

Arguments

name Name for the traffic action. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. Cannot be changed after a traffic action is created.

The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my action” or ‘my action’).

qual Protocol, either HTTP or TCP, to be used with the action.

Possible values: http, tcp

appTimeout Maximum amount of time, in minutes, a user can stay logged on to the web application. Minimum value: 1 Maximum value: 715827

SSO Provide single sign-on to the web application. NOTE : Authentication mechanisms like Basic-authentication require the user credentials to be sent in plaintext which is not secure if the server is running on HTTP (instead of HTTPS).

Possible values: ON, OFF

HDX Provide hdx proxy to the ICA traffic

Possible values: ON, OFF

formSSOAction Name of the form-based single sign-on profile. Form-based single sign-on allows users to log on one time to all protected applications in your network, instead of requiring them to log on separately to access each one.

fta Specify file type association, which is a list of file extensions that users are allowed to open.

Possible values: ON, OFF

wanscaler Use the Repeater Plug-in to optimize network traffic.

Possible values: ON, OFF

kcdAccount Kerberos constrained delegation account name Default value: “Default”

samlSSOProfile Profile to be used for doing SAML SSO to remote relying party

proxy IP address and Port of the proxy server to be used for HTTP access for this request.

userExpression expression that will be evaluated to obtain username for SingleSignOn Maximum value: 256

passwdExpression expression that will be evaluated to obtain password for SingleSignOn Maximum value: 256

unset vpn trafficAction

Use this command to remove vpn trafficAction settings.Refer to the set vpn trafficAction command for meanings of the arguments.

Synopsis

unset vpn trafficAction [-wanscaler] [-kcdAccount] [-proxy] [-userExpression] [-passwdExpression]

show vpn trafficAction

Displays information about all the configured traffic actions, or displays detailed information about the specified traffic action.

Synopsis

show vpn trafficAction []

Arguments

name Name of the traffic policy action for which to display detailed information.

Output

qual The protocol that is set with the action; for example, http or tcp.

appTimeout The application timeout

SSO Whether or not Single Sign On is enabled.

formSSOAction Name of the form-based single sign-on profile. Form-based single sign-on allows users to log on one time to all protected applications in your network, instead of requiring them to log on separately to access each one.

HDX Whether or not HDX Proxy for ICA traffic is enabled.

fta Whether or not file-type association is enabled.

wanscaler Use the Repeater Plug-in to optimize network traffic.

kcdAccount Kerberos constrained delegation account name

samlSSOProfile Profile to be used for doing SAML SSO to remote relying party

proxy IP address and Port of the proxy server to be used for HTTP access for this request.

userExpression expression that will be evaluated to obtain username for SingleSignOn

passwdExpression expression that will be evaluated to obtain password for SingleSignOn

stateflag devno count

vpn-trafficAction