Which Citrix ADC mode allows using the client’s IP address as the source IP for ADC-to-server connections?

Which Citrix ADC mode allows using the client’s IP address as the source IP for ADC-to-server connections?

• A. USIP
• B. USNIP
• C. Layer 2
• D. Layer 3

Answer: (A)

Preserving the client’s IP address for connections from the ADC to backend servers is achieved with Use Source IP mode. When this mode is enabled, the Citrix ADC forwards the actual client IP as the source of connections to the servers instead of using its own SNIP or VIP. This lets servers see and log the real client IP, which is important for auditing, policies, and troubleshooting. For this to work, the network must allow return traffic to the client IP (typically no NAT between the ADC and servers, or proper routing back to the client). Layer 2 and Layer 3 modes deal with how traffic is forwarded at the network layer and do not specifically ensure that the client IP is used as the source for server connections. USNIP would use the SNIP as the source instead of the client IP, which is the opposite of what’s required here.

Preserving the client’s IP address for connections from the ADC to backend servers is achieved with Use Source IP mode. When this mode is enabled, the Citrix ADC forwards the actual client IP as the source of connections to the servers instead of using its own SNIP or VIP. This lets servers see and log the real client IP, which is important for auditing, policies, and troubleshooting. For this to work, the network must allow return traffic to the client IP (typically no NAT between the ADC and servers, or proper routing back to the client).

Layer 2 and Layer 3 modes deal with how traffic is forwarded at the network layer and do not specifically ensure that the client IP is used as the source for server connections. USNIP would use the SNIP as the source instead of the client IP, which is the opposite of what’s required here.