RE: [FW1] SAP on FW1-VPN

["Murphy, Paul" <Paul.Murphy@FW1-NOSPAMlloydstsb.co.uk>]

The last problem I had related to MTU-Size was that the packets were sent
with the don't fragment flag on, at maximum MTU (set as a standard across
the network), these were then encrypted and consequently the packets
exceeded MTU, they arrive at the next router too big, which then responded
to the originator that the packets were too large to sent through without
fragmenting (destination unreachable).

The fix was to increase the MTU along the parts of the network that the
tunnel existed along.

Paul.

-----Original Message-----
From: Koen Goos [mailto:koen.goos@dlogistics.com]
Sent: 20 October 2000 10:48
To: Roßmanith, Peter; Fw-1-Mailinglist
Subject: RE: [FW1] SAP on FW1-VPN



Hi,

Thank you for answering but unfortunately we do.

Allow me,

Our configuration: VPN between FW1 and netscreen 10 running perfectly,
SAP-server on the
Netscreen site, clients on the other site.

If we run a supplier select (a large query) on the clients then the
communication tends to drop leaving this connection reset by peer in the SAP
log (and NT eventlog).

I agree we never experienced this problem using a netscreen client (the
equivalent for securemote) and a regular ISP dial-up connection on the
client.

Before going in details of TCP and IP tracing I hope to get someone with
experience on this who could advice us.

Thanks again for your willingness to help.

Koen
|- -----Original Message-----
|- From: owner-fw-1-mailinglist@lists.us.checkpoint.com
|- [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
|- Roßmanith, Peter
|- Sent: vrijdag 20 oktober 2000 10:37
|- To: 'koen.goos@dlogistics.com'; Fw-1-Mailinglist
|- Subject: AW: [FW1] SAP on FW1-VPN
|-
|-
|-
|- Hi,
|- i am using sapgui (3.1 and 4.6)over fw1 vpn.
|- it works fine also with securemote.
|- there is nothing to do with the mtu-size.
|-
|- peter
|-
|-
|- > -----Ursprüngliche Nachricht-----
|- > Von:	Koen Goos [SMTP:koen.goos@dlogistics.com]
|- > Gesendet am:	Freitag, 20. Oktober 2000 09:41
|- > An:	Fw-1-Mailinglist
|- > Betreff:	[FW1] SAP on FW1-VPN
|- >
|- >
|- > Hi,
|- >
|- > Does anyone of the group has experience on setting up SAP on a FW1 VPN?
|- >
|- > My problem : I experience 'session rest by peer', according to SAP
|- > something
|- > to do on MTU-size.
|- >
|- > Could someone please advice me?
|- >
|- > Thanks a lot.
|- >
|- > Koen Goos
|- >
|- > Quantum.Logistics Benelux nv
|- > Acaciastraat 18b
|- > B-2440 Geel
|- > Belgium
|- >
|- > Tel.: +32(0)14861222
|- > Fax: +32(0)14861229
|- > Mobile: +32(0)496168739
|- > e-mail: koen.goos@dlogistics.com
|- >
|- >
|- >
|- >
|- =================================================================
|- =========
|- > ======
|- >      To unsubscribe from this mailing list, please see the
|- instructions at
|- >                http://www.checkpoint.com/services/mailing.html
|- >
|- =================================================================
|- =========
|- > ======
|-
|-
|- =================================================================
|- ===============
|-      To unsubscribe from this mailing list, please see the
|- instructions at
|-                http://www.checkpoint.com/services/mailing.html
|- =================================================================
|- ===============



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====
---------------------------------------------------------------------------------
This e-mail is intended only for the above addressee. It may contain
privileged information. If you are not the addressee you must not copy,
distribute, disclose or use any of the information in it. If you have
received it in error please delete it and immediately notify the
sender.

evolvebank.com is a division of Lloyds TSB Bank plc.
Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS.  Registered in
England, number 2065.  Telephone No: 020 7626 1500
Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street,
Edinburgh EH2 4LH. Registered in Scotland, number 95237.  Telephone
No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the
Personal Investment Authority and represent only the Scottish Widows
and Lloyds TSB Marketing Group for life assurance, pensions and
investment business.

Members of the UK Banking Ombudsman Scheme and signatories to the UK
Banking Code.
----------------------------------------------------------------------------------


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================