Instruction manual

Appendix B: NetScaler API Reference
NetScaler 9000 Series Installation and Configuration Guide - Volume 1 B-11
NSICG60_JAN05
Saving NSConfigBinding.nsmap namespace mapping table
Compilation successful
This creates the stub files soapC.c, soapClient.c and stdsoap2.c.
Link them with your source code to create a stand-alone binary that invokes
the Netscaler API.
B.11 Securing NetScaler API Access
Secure access to NetScaler CLI objects can be provided based on the
NetScaler IP address or on the subnet IP address on which the NetScaler 9000
system is deployed.
B.11.1 Secure NetScaler API Access Based on NetScaler IP
To provide secured API access based on the NetScaler IP address, configure
the NetScaler 9000 system to use transparent SSL mode with clear text port
using the following configuration steps:
1. Create a loopback SSL service and configure it use transparent SSL mode
with clear text port, by entering the following CLI command:
add service secure_xmlaccess 127.0.0.1 SSL 443
-clearTextPort 80
2. Add certificate and key
add certkey cert1 –cert /nsconfig/ssl/ssl/cert1024.pem
–key /nsconfig/ssl/ssl/rsakey.pem
Note: You can use an existing certificate and key or use the “NetScaler
Certificate Authority Tool” to create key and test certificate for
secure access.
3. Bind the Certificate and the Key to the service using the following CLI
command:
bind certkey secure_xmlaccess cert1 -Service
4. Add a custom TCP monitor to monitor the SSL service you have added:
add monitor ssl_mon TCP -destport 80