Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
462
Views
0
Helpful
2
Replies

Change MTU on one ipsec tunnel PIX-TO-PIX

t.hadarson
Level 1
Level 1

‎09-19-2005 03:49 AM - edited ‎02-21-2020 01:58 PM

Hello,

i have one pix acting as hub and three pix as spoke. On one link i have pppoe on the outside interface. The ipsec tunnel get an MTU of 1492 while the other end at the spoke have an MTU of 1500 for this tunnel. Anyone who knows if there's a way to change the MTU only on this particular tunnel on the hub pix to 1492 without changing the interface MTU.

Labels:
0 Helpful
2 Replies 2

subaa
Level 1
Level 1

‎09-21-2005 05:23 AM

I think it's not possible. If you have mtu/fragment problems on the spoke with DSL, i suggest you to configure

sysopt connection tcpmss 1300

on the spoke. That will likely solve your problems, since udp packets are rearly larger than that size.

A_a

0 Helpful

t.hadarson
Level 1
Level 1
In response to subaa

‎09-21-2005 06:09 AM

Ok,

thanks for the tip.

Tony

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents