To ensure management changes are made on the Primary NetScaler in an HA pair, which address should have Management Access enabled?

• A. Cluster IP address
• B. NetScaler IP address
• C. Subnet IP address
• D. Virtual IP address

Answer: (A)

In a high-availability NetScaler pair, management traffic should hit the shared, virtual management address that represents the cluster. The Cluster IP address is that virtual IP and moves to the active (primary) node, so enabling Management Access on this address ensures any management session goes to the primary NetScaler. The per-node management IP (NSIP) would tie you to a specific node, and the Subnet IP and the Virtual IP are used for server reachability and client traffic, not for cluster management. So the cluster IP is the correct address to enable Management Access on to reliably make changes on the primary.