Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-25 Thread Saku Ytti
On (2014-02-24 17:17 -0800), Yucong Sun wrote: nope: at least for J-series, it will modify all packets passing through the device: check this http://www.juniper.net/techpubs/en_US/junos12.1/topics/example/session-tcp-maximum-segment-size-for-srx-series-setting-cli.html espeically the

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Mark Tinka
On Monday, February 24, 2014 02:19:50 AM Yucong Sun wrote: Does EX4200 support changing TCP-MSS on transit packets? I'm trying to use ex4200 as a simply gateway, and I need to lower tcp-mss on outgoing packets since the return path maybe tunneled. This seems to be a simple enough

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Saku Ytti
On (2014-02-24 12:47 +0200), Mark Tinka wrote: TCP MSS adjustments generally affect traffic terminating on the switch itself. Transit packets are affected by interface MTU. If you're able to affect TCP MSS of transit traffic, I certainly haven't yet heard about it (which is not to say

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Mark Tinka
On Monday, February 24, 2014 02:18:35 PM Saku Ytti wrote: I think you're mixing system level setting and interface level setting. When configured in interface it indeed mangles transit packets. When in system level it affects local when interface it affects transit. IIRC JunOS does not

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Yucong Sun
Would someone help to create one? reducing TCP-MSS is really just a compare write on a fixed location in IP header, should be a simple enough operation., but without it half the world doesn't work quite right with tunnels (GRE tunnels on ex)., due to malfunctioning pmtu, so we kind of stuck with

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Saku Ytti
On (2014-02-24 07:53 -0800), Yucong Sun wrote: J-series / SRX series support system { internet-options { tcp-mss } } even in packet mode, I would hope EX can do the same thing. This is not for transit, but for local TCP connections. For transit you need flow in SRX. I feel lack of

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Mark Tinka
On Monday, February 24, 2014 05:53:33 PM Yucong Sun wrote: Would someone help to create one? You can open one with your team. I have one going with Juniper already and I don't want to rock my boat before they start work on it :-). Mark. signature.asc Description: This is a digitally signed

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Yucong Sun
Well I don't have a active support contract, looks like this would become exactly another forgotten case... On Mon, Feb 24, 2014 at 9:01 AM, Saku Ytti s...@ytti.fi wrote: On (2014-02-24 07:53 -0800), Yucong Sun wrote: J-series / SRX series support system { internet-options { tcp-mss }

Re: [j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-24 Thread Dale Shaw
Hi Mark, all, On Mon, Feb 24, 2014 at 11:37 PM, Mark Tinka mark.ti...@seacom.mu wrote: On Monday, February 24, 2014 02:18:35 PM Saku Ytti wrote: I think you're mixing system level setting and interface level setting. When configured in interface it indeed mangles transit packets. When in

[j-nsp] Does EX4200 support changing TCP-MSS on transit packets?

2014-02-23 Thread Yucong Sun
Does EX4200 support changing TCP-MSS on transit packets? I'm trying to use ex4200 as a simply gateway, and I need to lower tcp-mss on outgoing packets since the return path maybe tunneled. This seems to be a simple enough per-packet filtering operation, does EX switch support this? Cheers.