Skip to main content

Cisco ASA MTU vs TCP MSS

I am trying to set jumbo MTU for Cisco ASA 5585 and I did following:

asa1/pri/act(config)# mtu inside 9000

INFO: Jumbo frames should be enabled to receive packets more than 1500 MTU
      Use 'jumbo-frame reservation' command to turn on jumbo frame

INFO: TCP MSS may need to be adjusted using 'sysopt connections tcpmss'
      command to pass large TCP segments

Now it is saying you may need to set sysopt connections tcpmss. I have noticed in my old Cisco ASA firewall it has the following setting because when we setup VPN IPsec with AWS they said do following recommended setting:

sysopt connection tcpmss 1379

Question is if I set sysopt connection tcpmss 9000 is it going to break anything in relation to the IPsec tunnel?

Satish
  • 4.4k
  • 14
  • 74
  • 126