Hi,
Thanks for that. We need to increase the mtu as there are large packets
being sent through a vpn which have the do-not-fragment bit set. If you
think 1600 is too large, what would you recommend? (i guess it depends
on the packet size).
Ken
Dallas Bishoff wrote:
>
> Ken:
>
> The MTU generally isn't configured through voyager. I believe you'll have
> to use the "ipsctl" command.
>
> Because of the security configuration of Nokia's IPSO code, you cannot do a
> configuration of an interface using ifconfig at the command line.
>
> By-the-way, 1600 is generally way to high.
>
> Regards!!!
>
> Dallas N. Bishoff
> CISSP,
> MCSE+I, MCT, CCA, ICE, CCSE,
> Nokia Security Administrator (NSA),
> Nokia VPN Gateway Administrator,
> Nokia Security Instructor,
> Certified RSA SecurID Support Engineer,
> Certified RSA SecurID Instructor,
> Blah, blah, blah...
>
> From: Ken Blinco <[EMAIL PROTECTED]>
> To: fw1 <[EMAIL PROTECTED]>
> Subject: [FW1] nokia IP300 - increasing mtu
> Date: Tue, 27 Mar 2001 08:18:52 +1000
>
> Hi,
>
> How do I increase the mtu on my interfaces on a Nokia IP300?
> The html management gui does not allow you to modify the mtu. When I
> try to run: 'ifconfig eth-s4p1c0 mtu 1600' from the command line, it
> does nothing (in fact I can't even bring the interface down using the
> ifconfig command.
>
> Why does the ifconfig command have no affect? Do I need to shut down
> the firewall (fwstop) first?
>
> If I do manage to change the mtu from the command line, where is a good
> place to put the command so it maintains the setting on reboot (maybe
> /etc/rc ?)
>
> Any info would be appreciated.
>
> Thanks
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
