NEW: Deployment Guide for BIG-IP v11 and VMware View 5

BTW, the iApp for View can be downloaded here:

 

http://devcentral.f5.com/wiki/iApp.VMware-View-5-iApp-Template.ashx

 

Thanks for posting this Frank. I'm excited about the capabilities of this new iApp. The iApp cuts down on the time it takes to setup a new VMware View deployment to just a few minutes. Along with the enhancements in View 5, this is really a winning combination.

 

 

The iApp initially asks you whether you are deploying View with LTM using VMware View Security Servers in place or not. If you are using security servers, health monitors, pools, load balancing and virtual servers are all setup to manage connections through View Security Servers. Previously, this had to be done manually, and because View uses three port/protocol combinations, it might a bit of manual labor to setup the system. With the iApp, it's literally one click to get all of that done.

 

 

Finally, the iApp also asks if you are using APM to further enhance and secure View. In this case, the visual policy is built automatically, further streamlining the process.

 

 

We look forward to comments and feedback about the iApp.

Hi all,

 

 

The posted link dos not point to the actual iApp, only to the PDF describing how to use it.

 

I havn't foud the iApp anywhere on Devcentral.

 

Any ideas where it might be ?

 

 

Fred,

 

 

There is an updated version of the iApp in testing right now. I do not have a release date yet, but keep coming back as we will release it as soon as is possible.

 

 

Paul

I am finding some abiguity in the deployment guide. I had a working View 4.6 with 11.0 and an older iApp, but now I am version View 5 with the latest iApp and I am unable to get this working properly.

 

 

My environment does not have a security server, and I was planning on using the f5 APM as security for the external view.

 

 

It seems maybe that the version 5 View and the latest iApp requires a security server, but I cant tell from the deployment guide. It seems to me I should be able to have a full network connection resource and be able to use a VDI session but get broken barely working PCOIP video, and RDP works fine. The same goes for the View iApp, broken bits of video.

 

 

Using 3900 in DMZ - get logged in through APM, get VPN IP address, connect to connection server, get list of available VDI desktops to connect to, launch one and I see the intial screen, and then pretty much just a few bits and peices of video, like the screen scrapes arent working. Do a netmon trace I see a bunch of packet going to from desktop to client using 4172 and 50002 which seems absolutely correct. I also have this f5 in dmz sending to the internal f5 that has the iApp configured as well and working properly for internal users, but not external. I have tried direct to connection server with the same results as well.

 

 

I have a call in to support but no guidance as to why this isnt working yet. We are suspecting that I need a security server.

 

 

Thanks for any help that you can provide.

 

 

Denis

Denis,

 

 

You ought not see traffic on port 50002. That use of that UDP port for PCoIP has been depreciated by VMware in View 5.x.

 

 

 

You have the ability to set the port that PCoIP uses to be different from the default 4172 port. It may be that your upgrade has somehow maintained the older port 50002/UDP port for PCoIP.

 

 

 

From your description it sounds like you have configured the iApp to use DTLS VPN. Is that correct?

 

 

 

Paul

 

 

Hi Denis,

 

A security server should not be required; what version of the iApp are you using?

 

Greg

 

Thanks for your reply, I am using f5.vmware_view_5.2012_06_14

 

 

I do see that my VDI desktops (Agent) are using port 50002 to talk to the Client. I am using 5.1.0 of the client, and 5.1.0 for the agent, and I do see from the documentation - http://pubs.vmware.com/view-51/topic/com.vmware.ICbase/PDF/view-51-security.pdf

 

that this may not be correct, and that it should be using 4172 for the agent port. That could be why it works internally and not through the DMZ.

 

 

I really want this to work again, I thank you for any additional help you may be able to provide. I am not sure where to change the ports that the View Agent is using as I just did an install of the agent using the defaults.

 

 

Denis

Thanks for your quick reply, I see that you are corect that 50002 is depricated. I am not sure where I can change that, and maybe that will be why I see some screen sometimes, maybe I am getting only 1 side of the conversation. I will need to figure out where to change the agent port.

 

 

Any ideas I am open to what ever help you can offer.

 

 

Denis

Can you try uninstalling / reinstalling the View Agent on one desktop source?

 

 

http://communities.vmware.com/message/1612474