How to Configure MTU and MSS Settings from the CLI
53484
Created On 09/25/18 17:52 PM - Last Modified 02/02/21 00:10 AM
Environment
- Palo Alto Firewall.
- PAN-OS 8.1 and above.
Resolution
Note: Enter the commands in configure mode.
MTU values can be set on the interface level.
Management Interface:
# set deviceconfig system mtu <value>
Dataplane Interface:
# set network interface ethernet ethernet1/3 layer3 mtu <value>
MSS values can be adjusted only at the interface level.
# set network interface ethernet ethernet1/3 layer3 adjust-tcp-mss enable yes
This sets the mss value based on MTU. Generally reduces the 20+20 (Layer 3 and Layer 4 headers) bytes from MTU value.