08-08-2007 08:45 PM - edited 03-11-2019 03:55 AM
Is it possible to set "connection tcpmss <value>" by using policy-map and not the global command "sysopt connection tcpmss 1400". Reason is that the sysopt feature is extremely usefull when using tunelling [vpn]. For other communication though you get to restrict the mss value, while you could use a higher value [i.e. 1460 for ethernet].
Regards.
08-14-2007 11:50 AM
11-26-2007 03:15 AM
The link does not describe how you set tcp-mss value (sysopt connection tcpmss) but how to "disable" the inpection tcp-mss feature....
What I wand to do, is "activate" the "sysopt connection tcpmss" only between certian source/destination and not globally....
http://www.cisco.com/en/US/docs/security/asa/asa71/command/reference/s8_711.html#wp1111044
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide