Control server port usage in rse.env

As documented in Connection flow, the client connects to a user-specific RSE server after authenticating with RSE daemon. To ensure that the RSE server connection is covered by an AT-TLS rule, you must specify in rse.env which ports can be used by RSE server. As mentioned in Defining the PORTRANGE available for RSE server of z/OS® Explorer Host Configuration Guide, RSE server does not need the port exclusively for the duration of the client connection. It is only in the time span between the server bind and the client connect that no other RSE server can bind to the port. This means that most connections use the first port in the range, with the rest of the range being a buffer in case of multiple simultaneous logons.

_RSE_PORTRANGE=8108-8118

Note: The second (end-of-range) port number is not used, so range 8108-8118 matches 10 ports, from 8108 to 8117.