About Kevin Michael Pratt

Kevin Michael Pratt · 01-17-2023

Hello Community,We have a number of ipsec tunnels on our ASA 5545 running software version 9.6.We have deployed a cloud based DDOS solution using GRE tunnels for any inbound traffic ingressing into the network via the internet upstream of the ASAs. ...

Kevin Michael Pratt · 02-01-2023

@MHM Cisco World I am sorry that I did not respond sooner to this, Thank You very much for your diligent work! This is very helpful.

Kevin Michael Pratt · 01-20-2023

@MHM Cisco World Any update regarding the following? Again thank you for your research and quick help!Are there any show commands that will show the default MSS is now changed or just check the running config?Changing the MSS value will not require ...

Kevin Michael Pratt · 01-18-2023

@MHM Cisco World This is very helpful. Thank you!! I believe the approach will be to make the MSS change from 1380 to 1356 using"sysopt connection tcpmss 1356" and then check the status of the l2l tunnels using "show crypto ipsec sa" and associated...

Kevin Michael Pratt · 01-18-2023

@MHM Cisco World I know your busy, curious if any progress was made with the lab for the L2L VPN and the different MSS/MTU scenarios? We are looking to complete implementation of this in the next two weeks and want to ensure that we have the steps c...

Kevin Michael Pratt · 01-17-2023

@MHM Cisco World Thanks very much for the quick reply!Could you please elaborate on the below, i looked at an existing connection on an ASA and noticed the followingpath mtu 1500, ipsec overhead 74(44), media mtu 1500Am i reading it correctly that ...

Member Since	‎07-20-2022 03:17 PM
Date Last Visited	‎02-09-2023 11:38 AM
Posts	10
Total Helpful Votes Received	5

User Statistics

User Activity

MSS clamping IPSEC tunnel -ASA

Re: MSS clamping IPSEC tunnel -ASA

Re: MSS clamping IPSEC tunnel -ASA

Re: MSS clamping IPSEC tunnel -ASA

Re: MSS clamping IPSEC tunnel -ASA

Re: MSS clamping IPSEC tunnel -ASA