[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More


Setting WAN MTU Size For Sonicwall Appliances

Published on
33,236 Points
17 Endorsements
Last Modified:
Community Pick
Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN connections.  Research with SonicWALL support and the cable or ADSL modem provider indicated the default MTU size needed to be modified.

The MTU dictates the size of packets sent from your router to your ISP before they are fragmented (broken down into smaller sizes).  If the packets are too big, they are fragmented.  The minimum MTU is 68 and the minimum size datagram a host is required to handle is 576.  The default MTU size for the SonicWALL WAN interface is 1500.

Steps to Determine the Appropriate MTU Size

1.      Click Start > Run and type CMD.
2.      From the command prompt type:
ping www.google.com -f -l 1500

Open in new window

-f: Prevents the packets from being fragmented.
-l: Ping, by default, sends a packet size of 32 bytes.  This switch allows the packet size to be specified.
Typically, the following response occurs: "Packet needs to be fragmented but DF set."

4.      Subtract anywhere from 10 to 20 from 1500 until a successful ping response occurs.  In my example, I subtracted 20 until I received the reply indicated in the screen shot.

 Step 4. Ping Reply
5.     Take the number from Step 4 and increase your packet size in small increments and retest until you find the largest possible packet that doesn't fragment.  Then take that number and add 28.  Use the resulting number as the new MTU.

You add 28 bytes because 20 bytes are reserved for the IP header and 8 bytes must be allocated for the ICMP Echo Request header.
I will typically find an MTU between 1430 and 1470.

Updating the WAN interface on the SonicWALL

Updating the WAN interface on the SonicWALL appliance is relatively easy to do and the procedure is the same no matter the model of appliance or version of OS.  It is also the same regardless of Enhanced or Standard versions of OS.  To modify the MTU of the WAN interface, complete the following steps.

1.      Login to the SonicWALL appliance and click the Settings on the left.
2.      Export the current settings to perform a backup of the appliance.
3.      Once the backup is complete, click Network on the left.
4.      If the Interfaces screen does not appear on the right, click Interfaces on the left.
         The physical interfaces should appear on the right.
5.      Click the pencil/paper icon at the end of the row for the X1 interface and a separate window will appear.
6.      Within the window, click the Advanced tab.
7.      Locate the Interface MTU setting and within the text box, type the resulting number obtained from ping steps above.
8.      Click OK to close the window and apply the new settings.
LVL 28

Expert Comment

nice article dude. I added it to my kbase.
LVL 33

Author Comment

thanks....I appreciate that!

Expert Comment

A++! Great article. Couldn't have done it without it.
Webinar: Miercom Evaluates Wi-Fi Security

It's not just about Wi-Fi connectivity anymore. A wireless security breach can cost your business large amounts of time, trouble, and expense. Plus, hear first-hand from Miercom how WatchGuard's Wi-Fi security stacks up against the competition in our upcoming webinar!

LVL 33

Author Comment

@prsbyrd :: Thank you!
LVL 33

Author Comment

hrtmath discovered a utility found at the link below that calculates your MTU for you.  The application doesn't require an install and runs as a stand alone.  I tested it and it works quite nicely.

LVL 32

Expert Comment

by:Blue Street Tech
Nice article and good find on the MTU utility above! I voted you up!

Expert Comment

by:Direct One
Added to our KB. Thanks for the info.

Featured Post

Challenges in Government Cyber Security

Has cyber security been a challenge in your government organization? Are you looking to improve your government's network security? Learn more about how to improve your government organization's security by viewing our on-demand webinar!

Join & Write a Comment

When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Watch this simple and effective video tutorial to extract attachments from Outlook 2007 and try this easy method by yourself. No need to go anywhere, just watch the video and export attachments from Outlook in few simple steps. To know more, click h…

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month