mtu

[Simon]

I've got a quick question. We've got some VPN users
having problems
connecting to a citrix server due to the mtu sizes.
Packets from the server
are 1460 and the maximum packet size accepted by the VPN
users is 1400.
When the client receives a packet with the
defragmentation bit set it tries
to send an ICMP packet back to the server requesting
fragmentation, however
there is a firewall blocking this.

Do you know how to set the df bit on or off for the
server NIC (W2K)?

 

[Marc Reynolds [MSFT]]

You cannot. You will need to either lower the MTU on the VPN server or allow
the ICMP traffic through.

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.