Skip to content

vpn sessionPolicy

The following operations can be performed on "vpn sessionPolicy":

add| rm| set| unset| show

add vpn sessionPolicy

p{white-space: pre-wrap;}

Creates a new session policy that, if bound, is applied after the user logs on to Citrix Gateway, and that determines the properties of the user session.

Synopsys

add vpn sessionPolicy <name> <rule> <action>

Arguments

name

Name for the new session policy that is applied after the user logs on to Citrix Gateway.

rule

Expression, or name of a named expression, specifying the traffic that matches the policy.

The following requirements apply only to the Citrix ADC CLI:

  • If the expression includes one or more spaces, enclose the entire expression in double quotation marks.

  • If the expression itself includes double quotation marks, escape the quotations by using the \ character.

  • Alternatively, you can use single quotation marks to enclose the rule, in which case you do not have to escape the double quotation marks.

action

Action to be applied by the new session policy if the rule criteria are met.

rm vpn sessionPolicy

p{white-space: pre-wrap;}

Removes the session policy that is applied after the user logs on to Citrix Gateway.

Synopsys

rm vpn sessionPolicy <name>

Arguments

name

Name of the session policy to remove.

set vpn sessionPolicy

p{white-space: pre-wrap;}

Modifies the rule or action of a session policy.

Synopsys

set vpn sessionPolicy <name> [-rule <expression>] [-action <string>]

Arguments

name

Name of the session policy to modify.

rule

Expression, or name of a named expression, specifying the traffic that matches the policy.

The following requirements apply only to the Citrix ADC CLI:

  • If the expression includes one or more spaces, enclose the entire expression in double quotation marks.

  • If the expression itself includes double quotation marks, escape the quotations by using the \ character.

  • Alternatively, you can use single quotation marks to enclose the rule, in which case you do not have to escape the double quotation marks.

action

Action to be applied by the new session policy if the rule criteria are met.

unset vpn sessionPolicy

p{white-space: pre-wrap;}

Use this command to remove vpn sessionPolicy settings.Refer to the set vpn sessionPolicy command for meanings of the arguments.

Synopsys

unset vpn sessionPolicy <name> [-rule] [-action]

show vpn sessionPolicy

p{white-space: pre-wrap;}

Displays a session policy.

Synopsys

show vpn sessionPolicy [<name>]

Arguments

name

Name of the session policy to display.

Outputs

rule

The new rule associated with the policy. Rules are combinations of expressions. Expressions are simple conditions, such as a test for equality, applied to operands, such as a URL string or an IP address. Expression syntax is described in the Installation and Configuration Guide.

action

The new vpn session action the policy is using.

boundTo

The entity name to which policy is bound

activePolicy

priority

bindPolicyType

policyType

builtin

Indicates that a variable is a built-in (SYSTEM INTERNAL) type.

feature

The feature to be checked while applying this config

expressionType

Type of policy (Classic/Advanced)

hits

Number of hits.

piHits

Number of hits.

devno

count

stateflag