>Stephen Chiu wrote:
> >
> > Hello everybody,
> >
> > I am testing Securemote connection on my company netwrok. I got
> > a problem that all file greater than about 1.5k bytes failed to transmit
> > through the securemote session and the connection eventally time-out
> > and dropped. I got and same "big file failure" problem when I did web
> > browsing, ftp and netbios windows sharing. (small files were OK) I was
> > using CP2000-SP2 (Solaris 7) and I tried SR on both NT4 and W2K
> > but got the same problem. Authentication was OK (I tried both FWZ
> > and Hybrid IKE w/ Radius). Anyone has experience on solving this 
>problem??
> > Please advise.
>
>Nop, I haven't had this problem before, but since you say "1.5 kbytes"
>long, it sounds to me like a MTU problem over there... check the
>MTU size over you network (routers, servers). Something could be
>misconfigured in some place...
>
>Hope this helps. Regards.
>
>Martin Humberto Hoz Salvador

I would have thought that the MTU would not be a problem at 1500 Bytes since 
that should be the max size of an Ethernet frame.  Not that it couldn't be 
the problem, it just seems like it shouldn't be.  Another possibility that's 
related to MTU is IP fragmentation.  This is something I've seen before when 
dealing with a specific size file getting through or not getting through.  I 
agree with checking along the route though to see if something in between is 
causing the problem.  You could test this by sniffing the line on each 
segment of the network and seeing where the traffic stops.  Depending on the 
sniffer app you prefer, you can filter for just the traffic your sending 
over the SR connection (I believe by port number or IP address).  This 
should at least give you an idea of where the problem is and from there you 
can check out the config for things like MTU and IP frag.

opiesan
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to