folks

i have a site to site vpn with possible mtu issues

i have configured the ip tcp adjust-mss 1300 command on both the lan side closest to the AD servers and on the interface facing the wan on my local router

the vpn doesn't start on the routers but on an attached hardware encryptor

there is another hardware encryptor on the remote site

i also have a route-map applied to the external/wan interface of my local router

route-map clear-DF permit 10
match ip address 150
set ip df 0

ACL 150 is  permit tcp any any

this has resolved lots of issues i was having with users trying to get authenticated internet access from the remote site across the vpn but i'm getting reports of problems adding new machines to the remote lan and with applying group policy

can someone advise

- should i set the mtu as well as configuring the ip tcp adjust-mss 1300 command

- are there any relevant config guides for a site to site vpn and using adjust-mss

i've attached a basic topology so hopefully it will help

thanks to anyone taking the time to read this or to reply

greatly appreciated