This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec VPN between ASL 6.2 and Cisco

Hello!

We have established a VPN between a Cisco and or ASL 6.2. There are some problems though.

Terminal Services, Exchange and some web-traffic (and probably also other traffic) does not work. We have suspected that this is due to some MTU settings or "do not fragment packets" settings.

The MTU of the VPN:s are set to 1800 in the ASL. The MTU of the cisco is 1500 (I think, this is what I get when I run "show crypto ipsec sa").

What settings can I make to get thoose two boxes to talk friendly with eachother?

Also, only the Cisco side can reinitiate the VPN if it fails, but this is a secondary problem.

Best regards,
Fredrik Lundqvist

This thread was automatically locked due to age.

Parents

0 NimmdirKeks over 19 years ago

MTU on both sides should be equal, and not higher than the default Ethernet MTU of 1500. This is the "virtuel" MTU (Payload) of the IPSec tunnel.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NimmdirKeks over 19 years ago

MTU on both sides should be equal, and not higher than the default Ethernet MTU of 1500. This is the "virtuel" MTU (Payload) of the IPSec tunnel.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data