×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

User cannot download files across the VPN tunnel because MTU size is too large

Document

Wed, 07/22/2009 - 19:55
Jun 22nd, 2009
User Badges:
  • Gold, 750 points or more

Core issue

A VPN session is established successfully. The client can pass most traffic, but cannot download files across the VPN tunnel.


Resolution

To resolve this issue, perform these steps:

  1. Lower the Maximum Transmission Unit (MTU) by running the setMTU.exe file, found on the VPN Client installation CD, on the PC.

    For more information on lowering the MTU, refer to the Adjusting the MTU Value section of the Usage Notes section of the Release Notes for VPN Client for Windows, Release 3.5.4.

    Note: For VPN Concentrator version 3.6, the MTU can be adjusted through the GUI.

    For more information, refer to VPN 3000 Series Concentrator version 3.6.

  2. If this solution does not solve the issue, the server from which the file is being downloaded could be setting the Do Not Fragment (DF) bit.

    To resolve this issue, reconfigure the server to not set the DF bit or clear the DF bit on Cisco routers and PIX Firewalls.

    For more information on clearing the DF bit, refer to DF Bit Override Functionality with IPSec Tunnels.

Loading.

Actions

This Document

Related Content