For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 5.2 > VPN Fragmentation

VPN Fragmentation

Created by dave. Last edited by dave, 314 days ago. Viewed 211 times. #2
[diff] [history] [edit] [rdf]


VPN throughput is slow and you suspect fragmentation.


You can influence the MSS (Maximum Segment Size) passed through the VPN by adding qualifiers to the policies governing traffic flow through the VPN.

You can only do this from the cli at present.


# config firewall policy
# edit <number>
# set tcp-mss-sender 1355
# set tcp-mss-receiver 1355
# next
# end
no comments | post comment

Virtual Dave Megaplex:

Internet Explorer 6 Users >>Click Here

(read this note about local search)

Logged in Users: (0)
… and 5 Guests.

Editing: snipsnap-help, Image Macro

(Et auditum est, et idcirco ego nunc simulare)

Installed 7 years and 38 days ago
Powered By >>SnipSnap Version 1.0b1-uttoxeter

This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful: | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt