[c-nsp] DMVPN Rollout -- MTU questions

[Pekka Savola]

On Fri, 23 May 2008, Kaj Niemi wrote:
> My experience has been that, instead of playing with interface/server MTUs, 
> simply setting ip tcp adjust-mss 1300 on any customer ingress interface 
> (very, very, very conservative) resolves any issues. Most issues in a typical 
> rollout seem to originate from Windows boxes and Windows administrators.

This would lead to big UDP,etc. packets getting blackholed, so setting 
mtu also on interface basis is required.  This certainly has come up 
and happened in decreased-MTU setups Finland..

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings