08-12-2008 06:45 AM
Can you share the best practice to configure the ip mtu setting on such a vpn connection? Thank you.
08-12-2008 10:45 AM
For GRE: The ip mtu command needs to be put on the GRE tunnel and the physical interface.
For IPSEC: It would be the physical interface as you do not have a logical interface in which to place that command.
Also do not forget to add the "ip tcp adjust-mss" command, or you will have alot of headaches.
08-12-2008 09:14 PM
Hi,
I am using the IPSEC tunnel but enabled the IP mtu under tunnel. Is it a good practice to enable IP mtu under tunnel only. Also what exactly the "ip tcp adjust-mss" will do?
Please explain.
Thanks in advance.
08-13-2008 05:29 AM
Thank you ciscocow. I do have tihe ip mtu configured on my GRE tunnels, with the ip tcp adjust-mass. Mu Ipsec interfaces hare using the defalut value (1500), I do not have the ip tcp adjust-mass configured. When I do perform the test on my IPsec interfaces I do get an error about failing MTU size and Do not Fragment bit, any ideas?
08-13-2008 10:32 AM
i would be using IP MTU of about 1440. This will be low enough to fix any issues. Just make sure its on the physical outside interface and the GRE tunnel.
Here is a link to what tcp mss-adjust does.
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080093f1f.shtml
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide