RE: help, question about GRE

From: Robert Watson (watson.robert@gmail.com)
Date: Tue May 23 2006 - 10:07:13 ART


 Running into packet fragmentation issues. Boosting the MTU to 1500 on the
tunnel interface will work in some situations but will severely slow your
connection same with route-maps to clear df-bits. I've run into this a
couple times troubleshooting Citrix connections across a GRE/IPSEC tunnel.
CCO will advise to try a number of things from PMTUD to boosting to 1500 to
adjust-mss, to clearing the df bit before traffic hits the tunnel with a
route-map.

In many of my turn ups I've found that configuring ip tcp-adjust mss 1400 on
the lan interface before it hits the tunnel works best.

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.7.0/345 - Release Date: 5/22/2006


This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:22 ART