ICS Provisioning Parameters

Provisioning parameters are those parameters which are required during the deployment of a virtual appliance. ICS accepts the following parameters as provisioning parameters in the XML format.

<PropertySection>

<Property oe:key="vaIPAddress" oe:value=""/>

<Property oe:key="vaNetmask" oe:value=""/>

<Property oe:key="vaGateway" oe:value=""/>

<Property oe:key="vaDefaultVlan" oe:value=""/>

<Property oe:key="vaExternalIPAddress" oe:value=""/>

<Property oe:key="vaExternalNetmask" oe:value=""/>

<Property oe:key="vaExternalGateway" oe:value=""/>

<Property oe:key="vaExternalDefaultVlan" oe:value=""/>

<Property oe:key="vaManagementIPAddress" oe:value=""/>

<Property oe:key="vaManagementNetmask" oe:value=""/>

<Property oe:key="vaManagementGateway" oe:value=""/>

<Property oe:key="vaManagementDefaultVlan" oe:value=""/>

<Property oe:key="vaPrimaryDNS" oe:value=""/>

<Property oe:key="vaSecondaryDNS" oe:value=""/>

<Property oe:key="vaWINSServer" oe:value="1.2.3.4"/>

<Property oe:key="vaDNSDomain" oe:value="ics.company.com"/>

<Property oe:key="vaAdminUsername" oe:value="admin"/>

<Property oe:key="vaAdminPassword" oe:value="Password123$"/>

<Property oe:key="vaCommonName" oe:value="ics-ext-port.company.com"/>

<Property oe:key="vaOrganization" oe:value="Ivanti"/>

<Property oe:key="vaRandomText" oe:value="randomtextrandomtextrandomtextrandomtext"/>

<Property oe:key="vaAcceptLicenseAgreement" oe:value="y"/>

<Property oe:key="vaEnableLicenseServer" oe:value="n"/>

<Property oe:key="vaAdminEnableREST" oe:value=""/>

<Property oe:key="vaAuthCodeLicense" oe:value=""/>

<Property oe:key="vaConfigURL" oe:value="http://a.b.c.d/ics_config.xml"/>

<Property oe:key="vaConfigServerCACertPEM" oe:value=""/>

<Property oe:key="vaConfigData" oe:value=""/>

<Property oe:key="vaInternalPortReconfigWithValueInVAppProperties" oe:value="1"/>

<Property oe:key="vaManagementPortReconfigWithValueInVAppProperties" oe:value="1"/>

<Property oe:key="vaExternalPortReconfigWithValueInVAppProperties" oe:value="1"/>

</PropertySection>

Parameter Name

Type

Description

vaIPAddress

IP address

Internal interface IP

vaNetmask

IP address

Internal interface subnet mask

vaGateway

IP address

Internal interface IP gateway

vaDefaultVlan

integer

VLAN number to assign to this interface

vaExternalIPAddress

IP address

External interface IP

vaExternalNetmask

IP address

External interface subnet mask

vaExternalGateway

IP address

External interface IP gateway

vaExternalDefaultVlan

integer

VLAN number to assign to this interface

vaManagementIPAddress

IP address

Management interface IP

vaManagementNetmask

IP address

Management interface subnet mask

vaManagementGateway

IP address

Management interface IP gateway

vaExternalDefaultVlan

integer

VLAN number to assign to this interface

vaPrimaryDNS

IP address

Primary DNS IP

vaSecondaryDNS

IP address

Secondary DNS IP

vaWINSServer

IP address

Windows server IP

vaDNSDomain

string

Windows domain name

VaAdminUsername

string

Admin username

vaAdminPassword

string

Admin password

vaCommonName

string

Common name

vaOrganization

string

Organization name

vaRandomText

string

Random text to generate self-signed certificate

vaAcceptLicenseAgreement

character

“y” to accept the license agreement

vaEnableLicenseServer

character

“y” to enable it as VLS server. “n” to bring it up as a ICS node.

vaAdminEnableREST

character

“y” to enable REST for administrator user

vaAuthCodeLicense

string

Authentication code that needs to be obtained from Ivanti.

vaConfigURL

string URL

Http based URL where XML based ICS configuration can be found.

vaConfigServerCACertPEM

string

PEM format of CA certificate.

vaConfigData

string

base64 encoded XML based ICS configuration.

vaInternalPortReconfigWithValueIn

VAppProperties

integer

The Internal port overwrite property. If set to 1, overwrites the virtual appliance’s internal port settings with the ones specified during deployment. Set this value as 1.

vaManagementPortReconfigWithValueIn

VAppProperties

integer

The Management port overwrite property. If set to 1, overwrites the management port-related parameters in the ICS with the ones defined here. Set this value as 1.

vaExternalPortReconfigWithValueIn

VAppProperties

integer

The External port overwrite property. If set to 1, overwrite the external port-related parameters in ICS/IPS with the ones defined here. Set this value as 1.

v6 Parameters

Parameter Type Description
vaNetworkStack IPv4 or IPv6 address

It indicates network address configured during deployment.

v4 : IPv4 addresses are allowed to configured.

v6 : IPv6 addresses are allowed to configured.

Both: IPv4 and IPv6 addresses are allowed to configured.
vaIPv6Address IPv6 address Internal interface IPv6 address

vaPrefix

IPv6 address

Internal interface IPv6 prefix length.

vaIPv6Gateway

IPv6 address

Internal interface IPv6 gateway address.

vaManagementIPv6Address

IPv6 address

Management interface IPv6 address

vaManagementPrefix

IPv6 address

Management interface IPv6 prefix length.

vaManagementIPv6Gateway

IPv6 address

Management interface IPv6 gateway address.

vaExternalIPv6Address

IPv6 address

External interface IPv6 address

vaExternalPrefix

IPv6 address

External interface IPv6 prefix length.

vaExternalIPv6Gateway

IPv6 address

External interface IPv6 gateway address.

ICS supports zero touch provisioning. This feature can detect and assign DHCP networking settings automatically at the ICS boot up. The following ICS parameters should be set to null in order to fetch the networking configuration automatically from the DHCP server.

•vaIPAddress

•vaExternalIPAddress

•vaManagementIPAddress

•vaNetworkStack

•vaManagementIPv6Address

• vaExternalPrefix

•vaNetmask

•vaExternalNetmask

•vaManagementNetmask

•vaIPv6Address

•vaManagementPrefix

•vaExternalIPv6Gateway

•vaGateway

•vaExternalGateway

•vaManagementGateway

•vaPrefix

• vaManagementIPv6Gateway

  

•vaPrimaryDNS

•vaSecondaryDNS

•vaDNSDomain

• vaIPv6Gateway

•vaExternalIPv6Address

  

Leased IP from DHCP server should be valid for a long time as ICS does not request for DHCP renewals.

Troubleshooting

By default, all VMs deployed in Nutanix have 3 vNIC queues, which limits the ESP performance of the gateway. vNIC queues can be changed to match the number of CPUs to increase the ESP performance.

For more information, see Nutanix portal