Problem with MTU
Problem
One of our customer has two branches. There is Site-2-Site VPN (based on Cisco ASA devices) between those two branches. There was weird problem when traffic went through that Site-2-Site VPN tunnel. Some communications were fine, but most of them didn’t work. Problems that we noticed:
- OutlookAnywhere didn’t work
- Domain controllers from both sides couldn’t replicate
- HTTPS connections didn’t work
- ESX client didn’t connect to ESXi server via tunnel (Call “ServiceInstance.RetrieveContent” for object “ServiceInstance” on Server…)
Solution
Change MTU on computer to something lower than 1500 MTU. You can use following commands:
netsh int ip show int
netsh interface ipv4 set subinterface “Local Area Connection” mtu=1300 store=persistent
If everything works, you need to adjust MTU on Cisco ASA devices. There is great article about it HERE. We used Method 2.
This change made local administrators very very very happy 🙂
Recent Comments