[FW-1] Checkpoint & MTU 1400?? over IPSEC

[JOE CAMPOS <joe.campos3@FW1-NOSPAMVERIZON.NET>]

We have VPN Site-to-Site connections. We have eight countries all running different model Nokias on both ends. Whenever receive data from a different country we can download from them about 154kbytes/sec to our Dallas hub (Nokia IP 530) . Whenever we send data to a remote site(foreign country) like Melbourne for example, we can only send data at around 50kbytes/sec. I put my mtu to 1400  on my win2k machine and the problem went away. Of course, I can't do that to every machine. I am still waiting on some feedback from Nokia and Checkpoint. Has anyone see this problem before and if so can you provide any solutions to try? All the connections from my client to the local VPN box are 100mb and gigabit with everything hard-coded on the duplex and speed settings. Normally, I see my win2k machine sending data payloads at 1460 before I manually set it to 1400 mtu. Now it's like 1414 I believe. 

Also, if I configure interface four on the nokia box with a different subnet, I can send/receive data at the full 150 kbytes/sec. This is with my laptop and a crossover cable. The laptop is also Win2k. 


Thanks,



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================