Steelhead Mobile

[cgeary · Accepted solution]

An explicit fixed target rule that defines your source VPN or mobile subnets to internal destination subnets to optimize would work just fine. No need for the port 7870 deny if you have the right rules defined.

[BrightSpark]

Ah, so we have to put in an implicit rule that either says pass traffic source and dest, or deny 7870?

[cgeary]

Because fixed target rules do not use the auto discovery process, location awareness does not function. Location awareness relies on determining the round trip time between the client and the various Steelheads in path. Since a fixed target rule sends optimized connections directly to the specified peer IP address, location awareness cannot be used.

[BrightSpark]

All healthy, and using fixed target rules with location awareness.

Connections are optimised.

[cgeary]

Are affected local clients showing as Healthy: Licensed?

If so, are they showing optimized connections?

Are you using fixed target rules?

[BrightSpark]

That was my first thought as well, but alas no, if only it was so simple.

Acceleration policy is good and location awareness is enabled.

:(

[cgeary]

Sounds like the config wasn't saved prior to the shutdown. Can you verify your acceleration policy rules are correct and that location awareness is enabled?

[BrightSpark]

Hi All

The client had warning that power was going down, he did the sensible thing and shut everything down.

Since powering back up the controller now grants a license to everyone locally.  Now they controller has run out of licenses so remote users do not get a license.

I have now had to put the old rule in "deny subnet to controller port 7870" and this is working.

The  mobile controller was running 3.12, upgraded to 3.13.

The issue is still prevelant.

Any ideas?