Comments on: MTU settings for VPN http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/ Never go to bed mad. Stay up and fight! Thu, 05 Jan 2012 08:58:20 +0000 hourly 1 http://wordpress.org/?v= By: MTU Test (Set Optimal MTU) | I-BLOG http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-1601 MTU Test (Set Optimal MTU) | I-BLOG Fri, 18 Sep 2009 15:28:24 +0000 http://www.rsivanandan.com/?p=10#comment-1601 [...] how to find the optimal MTU value for traffic so that the packet doesn’t get fragmented => [ HERE [...] [...] how to find the optimal MTU value for traffic so that the packet doesn’t get fragmented => [ HERE [...]

]]> By: Shibu http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-1397 Shibu Wed, 04 Feb 2009 06:43:30 +0000 http://www.rsivanandan.com/?p=10#comment-1397 Hi rajeshji, Hope you are doing well and enjoying life out there. i have an issue with my vpn setup. issue i have explained in expert-exchange.kindly look at the below url and help me to bring up the tunnel. Thanks n advance Shibu http://www.experts-exchange.com/Software/System_Utilities/Remote_Access/VPN/Q_24104672.html Hi rajeshji,

Hope you are doing well and enjoying life out there. i have an issue with my vpn setup. issue i have explained in expert-exchange.kindly look at the below url and help me to bring up the tunnel.

Thanks n advance
Shibu

http://www.experts-exchange.com/Software/System_Utilities/Remote_Access/VPN/Q_24104672.html

]]> By: Aun http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-8 Aun Mon, 11 Sep 2006 20:00:54 +0000 http://www.rsivanandan.com/?p=10#comment-8 After much googling, I found that Exchange, when sending data back (usually large packets)_ to the client, sets the DF bit to 1, which doesn't allow packet fragmentation to occur. This doesn't work too well with IPSec VPN tunnels. To fix this, you can have your IPSec VPN Server (Concentrator, Router, PIX) clear the DF bit on both the private and public interface. This should make things work better. Hope this helps. After much googling, I found that Exchange, when sending data back (usually large packets)_ to the client, sets the DF bit to 1, which doesn’t allow packet fragmentation to occur. This doesn’t work too well with IPSec VPN tunnels. To fix this, you can have your IPSec VPN Server (Concentrator, Router, PIX) clear the DF bit on both the private and public interface. This should make things work better.

Hope this helps.

]]> By: Crypto http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-7 Crypto Wed, 02 Aug 2006 21:44:44 +0000 http://www.rsivanandan.com/?p=10#comment-7 You are running an older version of PIX OS? 6.3? Try running the command "no fixup protocol smtp 25" to fix this issue, configure your exchange server to play nice with PIX. FYI, PIX 7.x SMTP Fixups are fixed-up so if you upgrade the software in the PIX 515 you should be able to send / rec email just fine... In the meantime, turning off application inspection will get you up and running. Luck, ~c You are running an older version of PIX OS? 6.3?

Try running the command “no fixup protocol smtp 25″

to fix this issue, configure your exchange server to play nice with PIX.

FYI, PIX 7.x SMTP Fixups are fixed-up so if you upgrade the software in the PIX 515 you should be able to send / rec email just fine… In the meantime, turning off application inspection will get you up and running.

Luck,

~c

]]> By: Rajesh T Sivanandan http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-6 Rajesh T Sivanandan Mon, 17 Jul 2006 10:53:44 +0000 http://www.rsivanandan.com/?p=10#comment-6 Were you able to connect fine ? Couple of questions.. 1. Is your VPN Client local subnet same as your corporate subnet ? If so Change it. 2. Are you able to ping the ip address of exchange when vpn is connected. If no, then it is not configured properly. 3. Did you try out the comments from the blog post I had, if so let me know. -- Cheers, Rajesh T Sivanandan Were you able to connect fine ? Couple of questions..

1. Is your VPN Client local subnet same as your corporate subnet ? If so Change it.

2. Are you able to ping the ip address of exchange when vpn is connected. If no, then it is not configured properly.

3. Did you try out the comments from the blog post I had, if so let me know.

–
Cheers,
Rajesh T Sivanandan

]]> By: Mostafa Hussein http://www.rsivanandan.com/2006/07/09/mtu-settings-for-vpn/comment-page-1/#comment-5 Mostafa Hussein Mon, 17 Jul 2006 10:22:44 +0000 http://www.rsivanandan.com/?p=10#comment-5 I have a pix 515e and SBS 2003, I configured the pix with VPN and I connect fine from outside to the intgernal network but when I run the outlook through the VPN as I'm in the network I can't get any response from the exchange. and the outlook failed to send or receive any data. should the pix got any more configuration or the exchange. thanks Mostafa I have a pix 515e and SBS 2003, I configured the pix with VPN and I connect fine from outside to the intgernal network but when I run the outlook through the VPN as I’m in the network I can’t get any response from the exchange. and the outlook failed to send or receive any data.
should the pix got any more configuration or the exchange.

thanks

Mostafa

]]>