56 | Troubleshooting
Protocol optimization errors
Solutions
•
Create a fixed-target rule on the client-side SteelHead.
– Specify the Target Appliance IP Address and its port as 7800 on the opposite SteelHead (in-path
without autodiscovery).
•
Configure end nodes (firewalls) to allow your probe to pass through.
•
Configure the SteelHead IP address as the friendly IP address for IDS or IPS.
•
Cisco PIX Firewall IOS 7.0 might block the autodiscovery probe. Some firewall configurations strip
TCP options or drop packets with these options. You can keep this configuration and switch to
fixed-target rules or change the configuration on the firewall.
Protocol optimization errors
When protocol optimization errors occur, the SteelHead doesn’t optimize expected protocols.
Solutions
To resolve protocol optimization errors, check:
•
that connections have been successfully established.
•
that SteelHeads on the other side of a connection are turned on.
•
for secure or interactive ports that are preventing protocol optimization.
•
for any pass-through rules that could be causing some protocols to pass through the SteelHeads
unoptimized.
•
that the LAN and WAN cables aren’t inadvertently swapped.
Server-side out-of-path connection caveats
Consider these caveats for a server-side out-of-path (OOP) SteelHead connection:
•
OOP configuration doesn’t support autodiscovery. You must create a fixed-target rule on the
client-side SteelHead.
•
You must create an OOP connection from an in-path or logical in-path SteelHead and direct it to
port 7810 on the primary interface of the server-side SteelHead. This setting is mandatory.
•
Interception is not supported on the primary interface.
•
An OOP configuration provides nontransparent optimization from the server perspective. Clients
connect to servers, but servers treat it like a server-side SteelHead connection. This affects:
– log files.
– server-side ACLs.
– bidirectional applications such as rsh.
•
You can use OOP configurations along with in-path or logical in-path configurations.
Содержание SteelHead 5080
Страница 10: ...10 Welcome Contacting Riverbed...
Страница 16: ...16 Riverbed Software Licenses Upgrades and Image Signing Software upgrades and image signing...
Страница 60: ...60 Troubleshooting Network integration checklist...
Страница 90: ...90 CX x70 Desktop Appliance Specifications CX 570 and CX 770 specifications...
Страница 94: ...94 CX x55 Appliance Specifications CX 255 specifications...
