For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 5.2 > VPN Fragmentation

VPN Fragmentation

Created by dave. Last edited by dave, one year and 244 days ago. Viewed 425 times. #2
[diff] [history] [edit] [rdf]
labels
attachments
(2017-04-12)

Problem

VPN throughput is slow and you suspect fragmentation.

Solution

You can influence the MSS (Maximum Segment Size) passed through the VPN by adding qualifiers to the policies governing traffic flow through the VPN.

You can only do this from the cli at present.

eg:

# config firewall policy
# edit <number>
# set tcp-mss-sender 1355
# set tcp-mss-receiver 1355
# next
# end
no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt