This topic has been archived. It cannot be replied.
-
工作学习 / 学科技术讨论 / GRE tunnel through an IPSec site-to-site tunnel出现的问题
-pnpn(双飞雁);
2011-5-18
{543}
(#6688061@0)
-
try to change the tunnel interface MTU to 1400...
-wenjin(黄山);
2011-5-19
(#6689971@0)
-
tried adjusting MTU on one tunnel interface, it didn't work. Can't change the other Tunnel interface on the other end due to the old IOS version. Will upgrade the IOS later and give another try.
-pnpn(双飞雁);
2011-5-25
(#6700406@0)
-
At asa: sysopt connection tcpmss 1468 (if GRE overhead = 4, no encr) or 1440 to be safe.
-diresu(makeITwork);
2011-5-27
(#6703863@0)
-
Based on cisco, practically, you may need set tcpmss to 1300
-diresu(makeITwork);
2011-5-27
(#6703948@0)
-
Thanks. Do I need to apply this new mss value on both side ASA? or just one side is ok.
-pnpn(双飞雁);
2011-5-29
(#6708834@0)