So we were looking to disable AAA vservers on enti...
# citrix-netscalerj
Jeff Riechers
06/27/2025, 12:57 PMSo we were looking to disable AAA vservers on entities to close down holes if they can't patch immediately. Seems you can't disable a AAA vserver at all. The function is there but it doesn't work. We pulled the cert and that downed it. Anyone else see that in their environment?
l
Lucas Van den Broeck
06/27/2025, 1:27 PMis the AAA vserver adressable and the entry point or unadressable?
j
Jeff Riechers
06/27/2025, 1:30 PMTried it on both in my lab. Can't disable from GUI, or CLI. Even though there is a disable function in the drop down.
l
Lucas Van den Broeck
06/27/2025, 1:35 PMasking because I usually always use unadressable's so I don't bother with a certificate, so they have state down, but they're perfectly functional
Lucas Van den Broeck
06/27/2025, 1:36 PMit's because the protocol is SSL that the netscaler will put it down or up depending on the presence of a certificate, but non-adressable will perfectly work in that scenario since it's internal kitchen talking to it
👍 1
j
Jeff Riechers
06/27/2025, 1:37 PMInteresting. I guess I never tried without it on non-addressable vips. But regardless. Should be able to disable this vip.
l
Lucas Van den Broeck
06/27/2025, 1:38 PMyes agreed, but just wanted to give you a warning that down doesn't have to mean that much 🙂
👍 1
Lucas Van den Broeck
06/27/2025, 1:39 PMif they have an IP and are directly used by something external to the netscaler, then down is probably good enough
Lucas Van den Broeck
06/27/2025, 1:39 PMif nothing else is running on it, you could disable the vip itself
2 Views