For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 5.2 > VPN Fragmentation

VPN Fragmentation

Created by dave. Last edited by dave, 102 days ago. Viewed 97 times. #2
[diff] [history] [edit] [rdf]
labels
attachments
(2017-04-12)

Problem

VPN throughput is slow and you suspect fragmentation.

Solution

You can influence the MSS (Maximum Segment Size) passed through the VPN by adding qualifiers to the policies governing traffic flow through the VPN.

You can only do this from the cli at present.

eg:

# config firewall policy
# edit <number>
# set tcp-mss-sender 1355
# set tcp-mss-receiver 1355
# next
# end
no comments | post comment

Virtual Dave Megaplex:

Internet Explorer 6 Users >>Click Here

(read this note about local search)

Logged in Users: (0)
… and 11 Guests.


Editing: snipsnap-help, Image Macro

(Et auditum est, et idcirco ego nunc simulare)

Installed 6 years and 192 days ago
Powered By >>SnipSnap Version 1.0b1-uttoxeter

This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt