cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
241
Views
0
Helpful
1
Replies

mss on interface

dobner
Level 1
Level 1

Hello everybody,

snenario:

inside --- PIX 535 6.3(3)UR --- outside with ipsec tunnel endpoint

traffic from inside to outside was restricted to mss=1460. After configuring the tunnel it's now mss=1380, also for traffic not going into the tunnel. The tunnel seems to lower the mss by 80 bytes.

mtu is still set to default 1500 on all interfaces. Is it possible to get non-tunnel-traffic back to mss=1460 bytes?

Many thanks for all kinds of help

Uli

1 Reply 1

mmellet
Level 3
Level 3

Try changing the value using the command sysopt connection tcpmss.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: