Re: IPSEC and MTU

From: Farrukh Haroon (farrukhharoon@gmail.com)
Date: Sat Jul 29 2006 - 03:19:08 ART


i dont know about 'self adjustment', but manually you can do it using
the ip tcp adjust-mss (to modify the maximum tcp segment size) and the
ip mtu command, see below:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ft_admss.htm#wp1061931

not for ipsec, but for vpdn based configurations you can use the 'ip
mtu adjust' command
to automatically adjust the mtu for virtual access interfaces, see:

http://www.cisco.com/warp/public/471/l2tp_mtu_tuning.html

two more features that might interest you are:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t2/ftdfipsc.htm

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ftprefrg.htm

HTH

On 7/14/06, Elliott Reyes <elliottreyes@adelphia.net> wrote:
> For all the CCIE Security Candidates,
>
>
>
> What is the command you can use to have the router self adjust the MTU size
> coming from the workstations attached to the lan to avoid fragmentation ??
>
>
>
>
>
> If you want to lower the MTU coming from the workstations.
>
>
>
>
>
>
>
> Elliott
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:48 ART