cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
260
Views
15
Helpful
3
Replies
Highlighted
Frequent Contributor

Changing MTU to resolve an IPSEC tunnel that won't establish?

I know many times you must change the MTU to less than the default otherwise certain Aps, sites, etc. the traverse the tunnel have poor performance, but are there instances where MTU could play a part in just establishing Ikev1 tunnels between two routers? 

Don't have the debugs right (to verify where it is failing or what errors seen) here but all parameters are the same on both ends, keys, etc., IPSEC negotiation traffic makes it to both ends, wondering if MTU could play a part just on tunnel negotiations.

 

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
VIP Advocate

Hi,

I have never seen that MTU could cause of negotiation issue. Yes, I faced slowness or some of the services not working issue due to MTU. I would like to check logs and configuration.

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

View solution in original post

Highlighted

I can not think of a circumstance where MTU would prevent ISAKMP negotiation. It really would be helpful to see the debug output.

HTH

Rick

View solution in original post

3 REPLIES 3
Highlighted
VIP Advocate

Hi,

I have never seen that MTU could cause of negotiation issue. Yes, I faced slowness or some of the services not working issue due to MTU. I would like to check logs and configuration.

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

View solution in original post

Highlighted

I can not think of a circumstance where MTU would prevent ISAKMP negotiation. It really would be helpful to see the debug output.

HTH

Rick

View solution in original post

Highlighted

Yes that is what I thought, had to make sure.

Too challenging to post on here, I can't even get to the remote site in any fashion LOL.

 

Thanks again!