File transfer failing through 3002 client VPN on large files.

[jkeeffe]

We have a remote user who transfers files through a 3002, configured as a VPN client, to our headend 3030 concentrator and onto a file server.

This user can logon to the server, have a Win Term server connection and copy small files. When he tries to copy large files across the VPN the file transfer times out, yet he can still maintain a term server connection.

He can ping the file server through the VPN using small packets, but when he increase the ping packet size he begins to get timeouts.

This sounds like an MTU size so we had him set the MTU size on his 3002 private interface to 1300, yet this did not solve the problem.

Do you have any other ideas? Should we decrease the MTU futher?

[#2]

If you are able to ping with a specific packet size then this problem is an MTU issue.

When you change the MTU or the DF bit options on the concentrators' interfaces, you need to do the same on both sides. If you set the Clear DF Bit option on the 3030, you need to do the same on the 3002 hw client.

So you can try using the Clear DF bit option (3d one) on both sides and not changing the MTU on any interface.

Try these links:

http://www.cisco.com/warp/public/471/vpn3k_lan2lan.html

http://www.cisco.com/en/US/products/sw/secursw/ps2308/prod_configuration_examples_list.html

[jkeeffe]

We finally got a file transfer to work across this 3002 client VPN connection but we had to lower the MTU size clear down to 1000. Why would we have to have such a low MTU?