MTU adjustment best practices

Need to adjust the MTU on these sites. They have an IPSEc tunnel in between. Should I adjust the MTU on the inside interface or outside interface?

Thanks
dissolvedAsked:
Who is Participating?
 
lanboyoConnect With a Mentor Commented:
Well, you can reduce the mtu of the inside interfaces facing the facing the hosts, and if you run a tunnel within the ipsec .

You can not disable "ip unreachables" if you want this to do any good. You need to do this on both sides of the network...

The command  "ip tcp adjust-mss"  on the external interfaces of the routers that have the ipsec tunnel on them will also help servers with PMTU issues.

This does not help with udp ...

0
 
lanboyoCommented:
You really need to lower the MTUs of the workstations on the network.
0
All Courses

From novice to tech pro — start learning today.