Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 589
  • Last Modified:


I'm handling a case where changing the mtu size of the packet is needed to have traffic passing through a GRE tunnel. The only thing that solves the issue is either reducing the ip tcp adjust-mss on the interface or the mss on the device.

Unfortunatelly customer doesn't have routers where to set the tcp adjust-mss command, only layer 3 switches where the command is not supported.

More specifically 6500 are not supporting tcp adjust command.

I tried workarounds like setting a PBR to set the DF bit to 0 for the traffic that will go over the tunnel, changing the mtu size on the tunnel to 1400 and 1600 but neither work, it seems that the remote server doesn't accept fragmented packets.

Lowering the MTU on the pc solves the problem but customer didn't like the workaround.

I wanted to know if you have any other workaround I could try to fix this kind of issues  for this platform.
1 Solution
>Lowering the MTU on the pc solves the problem but customer didn't like the workaround.
It's not a workaround, it is a solution - and a very simple one at that. It won't affect anything else on that PC, so I don't understand the problem. The source of the packet is the problem, not the piping that carries the packet when it has to be fragmented. Change the source and nothing else has to deal with it.
eehabsulimanAuthor Commented:
thanks a million

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now