GlobalProtect MTU Size
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

The Enhanced LIVEcommunity Experience is finally here! Learn all about it.

GlobalProtect MTU Size

L0 Member

Hi All,

 

I have an issue where GlobalProtect VPN clients are enable to establish a VPN tunnel when connected to a certain WiFi network. We have narrowed the issue down to the MTU size. 

 

Ther are various GRE tunnels and IPSEC tunnels which have reduced the effective usable MTU size to about 1236.

 

Is there a way to change the MTU size on the GlobalProtect client?

 

Or perhaps someone would offer another solution to this issue?

 

Cheers

James

2 REPLIES 2

Cyber Elite
Cyber Elite

Well that was the wrong button. 

 

Couldn't you just set the MTU size on the GP tunnel interface from CLI? I've never actually tried it for GP but it could potentially work without to much of an issue. Keep in mind though that this may actually cause more issues than it fixes. 

 

set network interface (interface) mtu <value> 

L1 Bithead

I know this is an old post, but it turned up in my search results.  Here's the answer:


It is possible to do this via CLI, or starting in GP 5.2.4, you can set it via the Portal

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPbZCAW

 

https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-new-features/new-features-rele...

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!