02-06-2002 04:49 AM - edited 02-21-2020 11:35 AM
I have a VPN using a pix 515 and 506 both running ver 6.1.1, with lotus domino servers on both sites. replication from the 506 site work across the VPN but it does not work in the other direction. These servers do replicate accross a lease line?
Any help would be apprechated.
Marcus
02-12-2002 02:35 PM
Are your access-lists exact mirrors on each PIX? Make sure youre running the latest PIX code. Any errors in the debugging log files? Inspect those and both configs before you call the TAC.
02-13-2002 07:31 AM
Hi,
When you use VPN networks, you increase the mtu due to the fact that you encapsulate, some applications
set the bit DF (Don't Fragment) therefore when you add the VPN encapsulation the packet is bigger than
the interface mtu
With a leased line you do not encqpsulate your traffic, if your max mtu is 1500 on the lan your mtu on the wan is alo 1500.
This could be the answer to your question
Did you check the MTU size ?
Can you try to reduce the server ip mtu ?
You can check it with an analyser or with the router
statistics
Kind regards
Philippe CUVILLIER
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide