Re: [FW1] nokia IP300 - increasing mtu

[Ken Blinco <ken_blinco@FW1-NOSPAMbridgepoint.com.au>]

Hi,

Thanks for that.  We need to increase the mtu as there are large packets
being sent through a vpn which have the do-not-fragment bit set.  If you
think 1600 is too large, what would you recommend? (i guess it depends
on the packet size).

Ken



Dallas Bishoff wrote:
> 
> Ken:
> 
> The MTU generally isn't configured through voyager.  I believe you'll have
> to use the "ipsctl" command.
> 
> Because of the security configuration of Nokia's IPSO code, you cannot do a
> configuration of an interface using ifconfig at the command line.
> 
> By-the-way, 1600 is generally way to high.
> 
> Regards!!!
> 
> Dallas N. Bishoff
> CISSP,
> MCSE+I, MCT, CCA, ICE, CCSE,
> Nokia Security Administrator (NSA),
> Nokia VPN Gateway Administrator,
> Nokia Security Instructor,
> Certified RSA SecurID Support Engineer,
> Certified RSA SecurID Instructor,
> Blah, blah, blah...
> 
> From: Ken Blinco <ken_blinco@bridgepoint.com.au>
> To: fw1 <fw-1-mailinglist@lists.us.checkpoint.com>
> Subject: [FW1] nokia IP300 - increasing mtu
> Date: Tue, 27 Mar 2001 08:18:52 +1000
> 
> Hi,
> 
> How do I increase the mtu on my interfaces on a Nokia IP300?
> The html management gui does not allow you to modify the mtu.  When I
> try to run:  'ifconfig eth-s4p1c0 mtu 1600' from the command line,  it
> does nothing (in fact I can't even bring the interface down using the
> ifconfig command.
> 
> Why does the ifconfig command have no affect?  Do I need to shut down
> the firewall (fwstop) first?
> 
> If I do manage to change the mtu from the command line, where is a good
> place to put the command so it maintains the setting on reboot (maybe
> /etc/rc ?)
> 
> Any info would be appreciated.
> 
> Thanks
> 
> ================================================================================
>       To unsubscribe from this mailing list, please see the instructions at
>                 http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================