NetScreen
[Top] [All Lists]

Re: [nn] How to reduce MTU for a VPN tunnel?

To: Netscreen Mailing List <nn@qorbit.net>
Subject: Re: [nn] How to reduce MTU for a VPN tunnel?
From: Marc Haber <mh+qorbit-nn@zugschlus.de>
Date: Thu, 29 Mar 2007 13:53:37 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: ns-list2@consult.net
Delivered-to: nn@qorbit.net
In-reply-to: <2c52b84e0703271158k33501639p2d522b40a6d2559e@mail.gmail.com>
List-archive: <http://www.qorbit.net/nn>
List-help: <mailto:nn-request@qorbit.net?subject=help>
List-id: "Netscreen mailing list for netscreen admins." <nn.qorbit.net>
List-post: <mailto:nn@qorbit.net>
List-subscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=subscribe>
List-unsubscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=unsubscribe>
References: <20070323181847.GA11246@torres.zugschlus.de> <20070327145339.GA30891@floridonet.com> <20070327172147.GI6091@torres.zugschlus.de> <2c52b84e0703271158k33501639p2d522b40a6d2559e@mail.gmail.com>
Sender: nn-bounces@qorbit.net
User-agent: Mutt/1.5.9i
On Tue, Mar 27, 2007 at 01:58:43PM -0500, Tim Eberhard wrote:
> The MTU setting is a system wide configuration. To view this use the "get
> envar" command.

I am not sure whether reducing the system-wide MTU of the netscreen
device is going to help here. The MTU of an IPSEC tunnel is always
going to be smaller than that, and in the current case, the client
does not feel like sending a large packet over the tunnel.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835
_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn

<Prev in Thread] Current Thread [Next in Thread>