I'm configuring ip tcp adjust-mss to 1200 on a router interface and when doing a packet trace I still see the MSS value showing up as 1460 in the intial SYN packet.
The setup is as follows; I have a pc connected to a router on Fa0/0. I have placed the command 'ip tcp adjust-mss 1200' in interface Fa0/0 configuration. This router then connects to another router. I issue a telnet from the host pc to the remote router, so the SYN is going through the router I have lowered the MSS value on and it just isn't changing. I'm using wireshark to verify. Am I missing something or is this command supposed to tell the router to intercept SYN packets and change the MSS value?
Any help is much appreciated.
Solved! Go to Solution.
What did you see in the SYN ACK? I think you should check the intial SYN packet on the remote router see if the MSS value got changed.
Interestingly enough it is 536 in the SYN ACK. I've run a few more experiments and when using a couple of switches as the source host and destination host with an 800 series router in between without changing the MSS value the SYN MSS is 536 and SYN ACK MSS is 516. Very strange. I've not had any luck with the original scenario which I've tried with both 3700 and 7200 series router.
When using the switches as source and destination for telnet with an 800 series router in between having the 'ip tcp adjust-mss 500' set on both ingress and egress interfaces, I did see the MSS value change to 500. So I think I'm making some progress but it is very strange.
Since I now can see that this command does work (on some platforms) I'm going to open a TAC case and see what they say.