We currently have a Site - Site connection to a law firm. They connect to our Peoplesoft server webpage. After a server upgrade they are intermittently connecting to the web page. After sniffing the connection I see the remote traffic connects fine but the reply back from the server is forcing the VPN3015 to issue ICMP Dest Unreachable (fragmentation) errors to the server. This is then followed by a bunch of TCP retries from the server. I suspect packet size is to big. So do I find a way to decrease the MTU size on the server ? If so what size ? Or find a way to set the fragmentation flag on the server ?
the 3015 can handle this; just change mtu to 1300 and set the interface to
Fragment prior to IPSec encapsulation without Path MTU Discovery (Clear DF bit)
under Configuration | Interfaces | Ethernet 2
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
