asa 5505 dsl / mtu based ssl problem

Unanswered Question

Hi everyone,

We moved our office to a different location (including our dsl conncetion). We also updated our asa from 8.0.3 to 8.0.4.

Since then, I'm having trouble opening the webportal from customers having a dedicated line.

I'm getting the certificate, can confirm it but the page won't load. When setting down the MTU size on the client everything works fine. Using a DSL or UMTS Line also works like a charm.

î've set:

mtu inside 1500

mtu outside 1492

sysopt connection tcpmss 1452

crypto ipsec df-bit clear-df inside

crypto ipsec df-bit clear-df outside

i also attached an packet trace showing tcp checksum errors while loading the page.

Anybody has an idea?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)


This Discussion