ASA-5506-X fragmentation

[Steve Babcock]

2 - ASA 5506-X running 9.13.1 - no firepower

The MTU on the external interface of each ASA is 1500

Performance over the VPN is very poor - we have 100/20 Internet connections at each end

The lowest ping packet size with "ping -f -l" is 1414 when going from a PC behind ASA #1 to a PC behind ASA #2

Should the MTU be changed to a lower number to stop fragmentation

OR

an adjust-mss somewhere ?

Steve

[balaji.bandi]

yes try Lowering the MTU and test.

here is some guide lines :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82444-fragmentation.html

https://www.cisco.com/c/en/us/td/docs/interfaces_modules/services_modules/vspa/configuration/guide/ivmsw_book/ivmvpnb.html