We are using a 3030 consentrator to terminate our VPN connections. Some users are connected to the Internet using ADSL, and they have a problem with Path MTU Discovery. As I understand there is now support for this in the new software. But will turning this on reset the interface an cause an possible disconect for already connected users.Also,are there any guidelines for what MTU value I should use one the Interface. I guess the support for Path MTU Discovery should be used on the public interface?
One more thing. Is Path MTU Discovery end-to-end. Does it have to be supported on both the client and the terminating device? The reason I ask is that our ISP do not use Path MTU Discovery but thecompany offering ADSL to some of our users are. ( Would it in that case be enough that the clients supports it)..
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...