topic Re: GlobalProtect MTU Size in General Topics

GlobalProtect MTU Size

jrwhitehead — Fri, 16 Dec 2016 15:37:45 GMT

Hi All,

I have an issue where GlobalProtect VPN clients are enable to establish a VPN tunnel when connected to a certain WiFi network. We have narrowed the issue down to the MTU size.

Ther are various GRE tunnels and IPSEC tunnels which have reduced the effective usable MTU size to about 1236.

Is there a way to change the MTU size on the GlobalProtect client?

Or perhaps someone would offer another solution to this issue?

Cheers

James

Re: GlobalProtect MTU Size

BPry — Fri, 16 Dec 2016 21:17:58 GMT

Well that was the wrong button.

Couldn't you just set the MTU size on the GP tunnel interface from CLI? I've never actually tried it for GP but it could potentially work without to much of an issue. Keep in mind though that this may actually cause more issues than it fixes.

set network interface (interface) mtu <value>

Re: GlobalProtect MTU Size

svintinner — Fri, 19 Mar 2021 15:48:07 GMT

I know this is an old post, but it turned up in my search results. Here's the answer:

It is possible to do this via CLI, or starting in GP 5.2.4, you can set it via the Portal

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPbZCAW

https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-new-features/new-features-released-in-gp-app/configurable-maximum-transmission-unit-for-globalprotect-connections.html