Lab 7: Troubleshooting Unified Access Gateway Configuration

Objective and Tasks

In this lab, you address configuration problems for a UAG appliance:

  1. Confirm that the UAG Appliances are Registered
  2. Verify the UAG-HZN-01a Configuration
  3. Verify the UAG-HZN-02b Configuration
  4. Review the UAG Logs
  5. Resolve a UAG Configuration Error
Task 1: Confirm that the UAG Appliances are Registered

In this task, you confirm that the UAG appliances are registered in the environment

  1. Login to ControlCenter (Landing Desktop)
    • Username:administrator
    • password:Pa$$w0rd
  2. From the ControlCenter server desktop, open Chrome.
  3. To open the Horizon Connection Server console, select Horizon-01A bookmark.
  4. Login with the following Credentials:
    • Username: Administrator
    • Password: Pa$$w0rd
  5. From the left navigation pane, navigate Settings > Servers.
  6. Under Servers page, select Gateways tab.
  7. Verify that the uag-hzn-01a.techseals.co and uag-hzn-01b.techseals.co UAG appliances are registered.
  8. Repeat the procedure for Horizon-01B.
Task 2: Verify the UAG-HZN-01a Configuration

In this task, you verify the UAG-HZN-01a configuration present in the environment.

  1. From the ControlCenter server desktop, open Chrome.
  2. Select the UAG-HZN-01a bookmark.
  3. Log in using the following credentials:
    • Username: admin
    • Password: Pa$$w0rd
  4. Under Configure Manually, click Select.
  5. Under General Settings, Enable the toggle switch for Edge Service Settings.
    • You see a green circle next to Horizon Settings.
  6. Click the arrow next to Horizon Settings.
  7. Verify that PCoIP, Blast, and Horizon Destination Server are all green.
  8. Verify the connections:
    1. Next to Horizon Settings, click the Gears icon.
    2. Verify the settings for the Horizon Connection Server URL and the thumbprint
    3. Verify that the PCoIP External URL is set to 172.16.20.10:4172
    4. Verify that the Blast External URL is set to https://uag-hzn-01a.techseals.co:8443
    5. Since you have not made any changes, click Cancel.
  9. From the ControlCenter server desktop, Navigate to Remote Desktops > Site1 folder.
  10. Open an RDP connection to the Horizon w11EXT-01a.RDP.
    1. On the desktop, open the Horizon Client
    2. To test UAG-HZN-01a, click the + icon to add a server and enter the address https://uag-hzn-01a.techseals.co
    3. Log in with the following credentials:
      • Username: Craig
      • Password: Pa$$w0rd
    4. Double-click W11-INST.
    5. Your login to W11-INST is successful, verifying that UAG-HZN-01a works.

Note: Please allow 3-5 minutes for the W11-INST to get connected.

The process can take several minutes so continue onto the next step during the login operation.

Task 3: Verify the UAG-HZN-01b Configuration

In this task, you verify the UAG-HZN-01b configuration present in the environment.

  1. From the ControlCenter server desktop, open Chrome.
  2. Select the UAG-HZN-01b bookmark.
  3. Log in using the following credentials:
    • Username: admin
    • Password: Pa$$w0rd
  4. Under Configure Manually, click Select.
  5. Under General Settings, Enable the toggle switch for Edge Service Settings.
    • You see a green circle next to Horizon Settings.
  6. Click the arrow next to Horizon Settings.
  7. Verify that PCoIP, Blast, and Horizon Destination Server are all green.
  8. Verify the connections:
    1. Next to Horizon Settings, click the Gears icon.
    2. Verify the settings for the Horizon Connection Server URL and the thumbprint
    3. Verify that the PCoIP External URL is set to 172.16.20.11:4172
    4. Verify that the Blast External URL is set to https://uag-hzn-01b.techseals.co:8443
    5. Since you have not made any changes, click Cancel.
  9. From the ControlCenter server desktop, Navigate to Remote Desktops > Site1 folder.
  10. Open an RDP connection to the Horizon w11EXT-01a.RDP.
    1. On the desktop, open the Horizon Client
    2. To test UAG-HZN-01b, click the + icon to add a server and enter the address https://uag-hzn-01b.techseals.co
    3. Log in with the following credentials:
      • Username: Craig
      • Password: Pa$$w0rd
    4. Double-click W11-INST.
    5. Connection fails and then the session is disconnected.
    6. This indicates a missed configuration of UAG-HZN-01b.

The process can take several minutes so continue onto the next step during the login operation.

Task 4: Review the UAG Logs

In this task, you review UAG logs to identify the problem.

  1. From the ControlCenter server desktop, open Chrome.
  2. Select the UAG-HZN-01b bookmark.
  3. Log in using the following credentials:
  4. Username: admin
  5. Password: Pa$$w0rd
  6. Under Configure Manually, click Select.
  7. Navigate to Support Settings > Log Archive, select the Download icon.
  8. Navigate to the Downloads folder, right click the UAG folder downloaded and select Extract All.
  9. Click Extract ALL
  10. Review the esmanager logs:
    1. Right click esmanager logs and open with Notepad++.
    2. Scroll to the bottom of the page and press Ctrl+F.
    3. Search for a message that includes backend channel is closed.

Important: Before the message appears, you can see the attempted connection to the desktop.

Task 5: Resolve a UAG Configuration Error

In this task, you change the UAG configuration to resolve the issue identified in the logs.

  1. From the ControlCenter desktop, open ChromeTo open the Horizon Connection Server console, select Horizon-01B bookmark.
  2. Login with the following Credentials:
    • Username: Administrator
    • Password: Pa$$w0rd
  3. Make the following configuration changes:
    1. In the left navigation pane, expand Settings.
    2. Select Server > Connection Servers.
    3. Select Horizon-01B and click EDIT.
    4. Verify that the check boxes for PCoIP Secure Gateway and Use Blast Secure Gateway for all Blast connections to machine are enabled.

Important: These settings can cause UAG errors.

  1. To resolve the UAG problems:
    1. In the left navigation pane, expand Settings > Servers > Connection Servers.
    2. Select Horizon-01B & click EDIT.
    3. Deselect the PCoIP Secure Gateway check box.
    4. Select the Do not use Blast Secure Gateway check box.
    5. Click OK.
  2. From the ControlCenter server desktop, Navigate to Remote Desktops > Site1 folder.
  3. Open an RDP connection to the Horizon w11EXT-01a.RDP.
    1. On the desktop, open the Horizon Client
    2. To test UAG-HZN-01b, Double-click server address https://uag-hzn-01b.techseals.co
    3. Log in with the following credentials:
      • Username: Craig
      • Password: Pa$$w0rd
    4. Double-click W11-INST.
    5. The connection is successful and UAG-HZN-01b is now working correctly.

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.