Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Cannot download from Intranet sites

Hi,

We have VPN setup through a Cisco 877w router. Everything works fine, we can share files, browse the Intranet pages but we cannot download files (.doc, .xls) from the page. The browser says folder or files not found. Those files can be accessed via the file server.

Could someone let me know what could prevent it please?

Triet

3 REPLIES
New Member

Re: Cannot download from Intranet sites

I don't think it is some issue with the router or VPN setup. You can check it by disabling the VPN on your router and trying to download the files.

New Member

Re: Cannot download from Intranet sites

Thank you for your reply bbaley. I think I didn't make myself clear in the first post: it is ok to download when I am physically in the office; when I am connected to the office LAN via VPN, I can browse the Intranet sites without any problem but I can not download from the Intranet (via VPN)

Best regards,

Triet

New Member

Re: Cannot download from Intranet sites

Go to cisco.com and search for ip tcp mss-adjust. This explains how to manipulate the maximum segment size on your office lan. Your server probably starts sending your requested file with an mtu of 1500. Since it traverses a tunnel that has a smaller mtu and the don't fragment bit is set on your server the router just drops the packets returning an icmp message "df set but fragmentation needed". You problably woud be able to see that on your server using a packet capture program. Just try to lower your server's MTU size of program the "ip tcp mss-adjust" command on your router. Start with a value of 1300 and gradually go up.

Regards,

Florent Conings

238
Views
0
Helpful
3
Replies
CreatePlease to create content