Access a NetScaler appliance

Last published : Sep 22, 2026
A NetScaler appliance has both a command line interface (CLI) and a GUI. The GUI includes a configuration utility for configuring the appliance and a statistical utility, called Dashboard. For initial access, all appliances ship with the default NetScaler IP address (NSIP) of 192.168.100.1 and the default subnet mask of 255.255.0.0. You can assign a new NSIP and an associated subnet mask during initial configuration.
If you encounter an IP address conflict when deploying multiple NetScaler units, check for the following possible causes:
  • Did you select an NSIP that is an IP address already assigned to another device on your network?
  • Did you assign the same NSIP to multiple NetScaler appliances?
  • The NSIP is reachable on all physical ports. The ports on a NetScaler are host ports, not switch ports.
The following table summarizes the available access methods.
Access Method Port Default IP Address Required? (Y/N)
CLI Console N
CLI and GUI Ethernet Y
Related information

Command line interface

Access the CLI locally by connecting a workstation to the console port, or remotely by connecting through the secure shell (SSH) from any workstation on the same network.

Log on to the Command Line Interface through the Console Port

The appliance has a console port for connecting to a computer workstation. To log on to the appliance, you need a serial crossover cable and a workstation with a terminal emulation program.
To log on to the CLI through the console port, follow these steps:
  1. Connect the console port to a serial port on the workstation. For more information, see Connect the console cable.
  2. On the workstation, start HyperTerminal or any other terminal emulation program. If the logon prompt does not appear, you might have to press ENTER one or more times to display it.
  3. In User Name, type nsroot. In Password, type nsroot and if that password does not work, try typing the serial number of the appliance. The serial number bar code is available at the back of the appliance.

Log on to the Command Line Interface by using SSH

The SSH protocol is the preferred remote access method for accessing an appliance remotely from any workstation on the same network. You can use either SSH version 1 (SSH1) or SSH version 2 (SSH2.)
If you do not have a working SSH client, you can download and install any of the following SSH client programs:
  • PuTTY
    Open Source software supported on multiple platforms. Available at:
    <http://www.chiark.greenend.org.uk/~sgtatham/putty/>
  • Vandyke Software SecureCRT
    Commercial software supported on the Windows platform. Available at:
    <http://www.vandyke.com/products/securecrt/>
These programs are tested by the NetScaler team, who have verified that they work correctly with a NetScaler appliance. Other programs might also work correctly, but have not been tested.
To verify that the SSH client is installed properly, use it to connect to any device on your network that accepts SSH connections.
To log on to a NetScaler appliance by using an SSH client, follow these steps:
  1. On your workstation, start the SSH client.
  2. For initial configuration, use the default IP address (NSIP), which is 192.168.100.1. For subsequent access, use the NSIP that was assigned during initial configuration. Select either SSH1 or SSH2 as the protocol.
  3. In User Name, type nsroot. In Password, type nsroot and if that password does not work, try typing the serial number of the appliance. The serial number bar code is available at the back of the appliance. For example.
login as: nsroot


Using keyboard-interactive authentication.


Password:


Last login: Tue Jun 16 10:37:28 2009 from 10.102.29.9





Done


>

NetScaler GUI

Important:
A certificate-key pair is required for HTTPS access to the Citric ADC GUI. On the ADC, a certificate-key pair is automatically bound to the internal services. On an MPX or SDX appliance, the default key size is 1024 bytes, and on a VPX instance, the default key size is 512 bytes. However, most browsers today do not accept a key that is less than 1024 bytes. As a result, HTTPS access to the VPX configuration utility is blocked.
Also, if a license is not present on an MPX appliance when it starts, and you add a license later and restart the appliance, you might lose the certificate binding.
Citrix® recommends that you install a certificate-key pair of at least 1024 bytes on the appliance for HTTPS access to the GUI. Also, install an appropriate license before starting the appliance.
The GUI includes a configuration utility and a statistical utility, called Dashboard, either of which you access through a workstation connected to an Ethernet port on the appliance.
The system requirements for the workstation running the GUI are as follows:
  • For Windows-based workstations, a Pentium 166 MHz or faster processor.
  • For Linux-based workstations, a Pentium platform running Linux kernel v2.2.12 or above, and glibc version 2.12–11 or later. A minimum of 32 MB RAM is required, and 48 MB RAM is recommended. The workstation must support 16-bit color mode, KDE, and KWM window managers used in conjunction, with displays set to local hosts.
  • For Solaris-based workstations, a Sun running either Solaris 2.6, Solaris 7, or Solaris 8.
Your workstation must have a supported web browser to access the configuration utility and Dashboard.
The following table lists the compatible browsers for NetScaler GUI version 12.1, 13.0, and 13.1:
Operating System Browser Versions
Windows 10 and later Edge 110.1587.63 and later
Windows 10 and later Mozilla Firefox 102 and later
Windows 10 and later Chrome 108 and later
MAC Mozilla Firefox 110.0.1 and later
MAC Safari 15.5 and later

Use the NetScaler GUI

Once you log on to the configuration utility, you can configure the appliance through a graphical interface that includes context-sensitive help.
To log on to the GUI, follow these steps:
  1. Open your web browser and enter the NetScaler IP (NSIP) as an HTTP address. If you have not yet set up the initial configuration, enter the default NSIP (http://192.168.100.1). The NetScaler logon page appears.
    Note: If you have two NetScaler appliances in a high availability setup, do not access the GUI by entering the IP address of the secondary NetScaler appliance. If you do so and use the GUI to configure the secondary appliance, your configuration changes are not applied to the primary NetScaler appliance.
  2. In the User Name text box, type nsroot.
  3. In the Password text box, type the administrative password you assigned to the nsroot account during initial configuration and click Login. If that password does not work, try typing the serial number of the appliance. The serial number bar code is available at the back of the appliance.
    To access the online help, select Help from the Help menu at the top right corner.

Use the Statistical Utility

Dashboard, the statistical utility, is a browser-based application that displays charts and tables on which you can monitor the performance of a NetScaler appliance.
To log on to Dashboard, follow these steps:
  1. Open your web browser and enter the NSIP as an HTTP address. The NetScaler® logon page appears.
  2. In the User Name text box, type nsroot.
  3. In the Password text box, type the administrative password you assigned to the nsroot account during initial configuration. If that password does not work, try typing the serial number of the appliance. The serial number bar code is available at the back of the appliance.