VPN mtu problem

[Simon Platt]

I've got a quick question. We've got some VPN users
having problems
connecting to a citrix server due to the mtu sizes.
Packets from the server
are 1460 and the maximum packet size accepted by the VPN
users is 1400.
When the client receives a packet with the
defragmentation bit set it tries
to send an ICMP packet back to the server requesting
fragmentation, however
there is a firewall blocking this.

Do you know how to set the df bit on or off for the
server NIC (W2K)?

 

[Michael Johnston [MSFT]]

There isn't a way to do this. You need to either allow the ICMP message to reach the server or reduce the server's MTU setting.

Thank you,
Mike Johnston
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the
terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from
which they originated.

 

[Simon Platt]

Mike,

Thanks for the speedy reply.

Regards

Simon

-----Original Message-----
There isn't a way to do this. You need to either allow

the ICMP message to reach the server or reduce the
server's MTU setting.

Thank you,
Mike Johnston
Microsoft Network Support

confers no rights. Use of included script samples are
subject to the

terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all

responses to this message are best directed to the
newsgroup/thread from