[nsp] VPN Trouble

Jeff Behl jeff at expertcity.com
Thu Jan 9 14:18:21 EST 2003


if it is a MTU issue (sounds plausible), try turning off PMTUD on the 
hosts, or if that's not feasible, you could have the router remove the 
DF bit with a route-map.  the gotcha with removing the DF bit is it 
won't be done in hardware...

Ryan O'Connell wrote:
> On 09 Jan 2003 18:55:54 -0300 Diego Costa <diego at ifxnw.com.uy> wrote:
> 
>>I have a customer (2 sites) connected with a vpn (tunnel gre) without
>>encript. And when he want to transmit a big volume of information (for
>>example a ls of a big directory) it gives timeout.
>>
>>I have 300ms between site A to B.
>>
>>
>>Somebody has an idea that can be happening?
> 
> 
> Try lowering the MTU on each end to see if that helps.
> 



More information about the cisco-nsp mailing list