Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 3 answers
  • Subscribers 30 subscribers
  • Views 23285 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec VPN - Path MTU

Steppenwolf

Hej,

i have multiple IPSec tunnel with an MTU smaller than 1500. The tunnel are up but some packets are not transmitted completely. I think the XG sends packets to the tunnel with the false MTU. Is Path MTU available in XG v17? 

Thanks.



This thread was automatically locked due to age.
Parents
  • +1

    Hej,

    i have multiple IPSec tunnel with an MTU smaller than 1500. The tunnel are up but some packets are not transmitted completely. I think the XG sends packets to the tunnel with the false MTU. Is Path MTU available in XG v17? 

    Thanks.

     

     

    Hello SteppenWolf

     

    You can set the Override MSS on the WAN interface under Advanced Settings using the GUI. This will be used for your Site to Site tunnels. As you can see we have it configured.

     

    There is also a KB about setting up Site to Site with Azure where the show where to sett the Override MSS if you would like to read more about it: https://community.sophos.com/kb/en-us/127546 

     

    Best Regards

    Rickard

Reply
  • +1

    Hej,

    i have multiple IPSec tunnel with an MTU smaller than 1500. The tunnel are up but some packets are not transmitted completely. I think the XG sends packets to the tunnel with the false MTU. Is Path MTU available in XG v17? 

    Thanks.

     

     

    Hello SteppenWolf

     

    You can set the Override MSS on the WAN interface under Advanced Settings using the GUI. This will be used for your Site to Site tunnels. As you can see we have it configured.

     

    There is also a KB about setting up Site to Site with Azure where the show where to sett the Override MSS if you would like to read more about it: https://community.sophos.com/kb/en-us/127546 

     

    Best Regards

    Rickard

Children
No Data