topic Re: HTTPS issues in Wireless

HTTPS issues

nmorretti — Sun, 04 Jul 2021 16:46:00 GMT

Configuration: Cisco Aironet 1100 AP. client using Cisco 802.11 a/b/g adapter with driver date 6/10/2004 (newest release). client connected at 54 mbps with 'excellent' signal. 4 clients connected to AP.

Trying to connect to Web Mail using HTTPS. Small folders load fine. Opening a folder with a large number of messages will not open. I am prompted multiple times for log-in to Web Mail.

On AP, receive statistics show large number of CRC anc Header CRC errors.

Same computer using lan line, web mail using HTTPS works fine.

This is a setting on AP or network card to enhance throughput. Any help is appreciated.

Re: HTTPS issues

scottmac — Sun, 04 Jul 2004 12:58:04 GMT

Try reducing the MTU size along the path. When using most encryption schemes (like SSL -HTTPS-) the "Do Not Fragment" bit is set.

If the packet is too large, and cannot be fragged, it gets dropped. That would explain why it works in the clear, but dies when handled over an encrypted link.

Drop the MTU to something like 1450 and work your way up (~1496) if that traffic gets through.

Good Luck

Scott

Re: HTTPS issues

nmorretti — Wed, 07 Jul 2004 16:55:59 GMT

Can MTU be set at the AP? I've looked through 1100 Series documentation but did not see it referenced nor could I find this on the configuration for the AP.---Thanks

Re: HTTPS issues

scottmac — Sat, 10 Jul 2004 12:40:49 GMT

I don't have access to an 1100 or a VxWorks-based AP right now, but on the 1200, running IOS, you can go to CONFIG T | INT DOT11RADIO 0 (or 1) |MTU XXXX to set the MTU size.

I wasn't able to find a settable MTU parameter in the GUI.

I'm still pretty sure that the VxWorks GUI (if that's what you have) has a setting for MTU, if not in the GUI, then in (that poor excuse for a) CLI mode.

What flavor of firmware are you using (IOS? what version?)?

Scott

Re: HTTPS issues

nmorretti — Mon, 12 Jul 2004 11:37:30 GMT

Upgrade to the latest AP software release this weekend and this has taken care of the problem. Thanks--