Re: pf and different MTUs

2005-01-28 Thread Chuck Swiger
Michael E.Conlen wrote:
I'm using FreeBSD and PF as a firewall between two  networks. I want to 
change the MTU on one network to 9k but I have to leave the MTU on the 
other network at 1500 bytes. Will the system handle the fragmenting for 
me going from the larger MTU to the smaller?
Sure.  However, if you have a lot of traffic using jumbo frames going over 
that 1500 MTU segment, you might be better off using an MTU of 1500 everywhere.

--
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pf and different MTUs

2005-01-28 Thread Michael E . Conlen
On Jan 28, 2005, at 4:36 PM, Chuck Swiger wrote:
Michael E.Conlen wrote:
I'm using FreeBSD and PF as a firewall between two  networks. I want 
to change the MTU on one network to 9k but I have to leave the MTU on 
the other network at 1500 bytes. Will the system handle the 
fragmenting for me going from the larger MTU to the smaller?
Sure.  However, if you have a lot of traffic using jumbo frames going 
over that 1500 MTU segment, you might be better off using an MTU of 
1500 everywhere.

At least half the traffic I use now doesn't go over that link and would 
benefit from the larger MTU. In addition I'm constrained on resources 
for those servers where as I can add additional firewalls without great 
expense. On the other side there is a good bit of traffic going over 
those links that would use jumbo frames but not all of it would. In 
addition the cost of using two separate networks for the traffic would 
be more than adding two more firewalls (based on the cost of doubling 
the number of ports) so I'm figuring this is the way to go.

Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"