52
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
Packet Ricochet
Packet Ricochet
The following symptoms occur due to packet ricochet:
Performance is less than expected
The following log message appears:
» [fionr taelrcreeapdt/y lnoactaltekde rnceoln/neiccotireo.n c:119426.316]
8.n7a3t._1c5h:e1c6k1: 1 SYN ==> packet 192.168.208.12:80 ==> 192.168.72.9:7801
Possible Cause
Traffic to the LAN is travelling to the WAN router on the way to the LAN.
Solutions
To resolve packet ricochet issues:
Change the in-path gateway to the LAN router.
Add static routes to LAN subnets through the LAN router.
Enable in-path simplified routing.
Packet Ricochet—Internet Control Messaging Protocol (ICMP)
Redirects
The following symptoms occur due to packet ricochet ICMP redirects:
Connections fail on first attempt, but succeed on second attempt.
On one or both sites, the in-path interface on the Steelhead appliance is on a different network than the
local host.
There are no in-path routes defined.
Possible Causes
Traffic to the LAN is travelling to the WAN router on the way to the LAN, but the router drops the
packet.
Outer connections to clients or servers are routed through the WAN interface to the WAN gateway, and
then routed through the Steelhead appliance to the next hop LAN gateway.
The WAN router is probably dropping the SYN from the Steelhead appliance before issuing an ICMP
redirect.
