Running into MTU issues with VPN running on Cisco 7206VXR

Discussion in 'Cisco' started by amit1017, Oct 17, 2007.

  1. amit1017

    amit1017

    Joined:
    Oct 15, 2007
    Messages:
    2
    Hi Everyone,

    I am having a strange problem. MY VPN Gateway is on Cisco 7206VXR, running 12.4(5a) code. Its peering with one of our client, who's VPN is Cisco 3700 router. My application is not able to send 1500 byte packets to the cilent. MTU on the VPN is set to 1500 byte. I know with the IPsec header, I was exceeding the MTU limitation, hence getting dropped.

    I had the application team clear the DF bit, hoping that it would fix the problem. But it didn't. On my packet capture, I see continuous re-transmissions of the same packet, followed by session disconnect (its the nature of the app - Its FIX traffic).

    I have been told, I should adjust the TCP MSS value on my VPN gateway. Can someone help me out on this? Will this solve my problem? How does adjusting MSS value help?

    My understanding is that when a TCP handshake is made, it overrides their MSS value with what we set. Is there any downside to changing the MSS value on the VPN? As it will be global change and affect all sessions through the VPN. Please help :(. Thanks in advance.

    Amit.
     
    amit1017, Oct 17, 2007
    #1
    1. Advertising

  2. amit1017

    amit1017

    Joined:
    Oct 15, 2007
    Messages:
    2
    Wondering if someone can provide any input? Thanks.
     
    amit1017, Oct 18, 2007
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. David Wenn

    FS Cisco 7206VXR/400 Routers

    David Wenn, Sep 9, 2003, in forum: Cisco
    Replies:
    1
    Views:
    428
    Cory Andrews
    Sep 10, 2003
  2. Henrik
    Replies:
    2
    Views:
    2,440
    Henrik
    Jan 6, 2004
  3. Bill B.
    Replies:
    7
    Views:
    4,107
    Captain
    May 13, 2004
  4. V. Evans

    ip mtu / interface mtu

    V. Evans, Aug 19, 2005, in forum: Cisco
    Replies:
    1
    Views:
    20,969
    www.BradReese.Com
    Aug 19, 2005
  5. Sebas
    Replies:
    2
    Views:
    861
    Sebas
    May 15, 2006
Loading...

Share This Page