IPSec and ESP add headers and trailers to a normal IP packet, which can lead to a packet being fragmented. The best practice is to set the maximum transmission unit (MTU) size as large as possible that will not cause a packet to be fragmented . To change the MTU size, choose Start, Programs, Cisco Systems VPN Client, Set MTU. Cisco has recommendations, by operating system, for the MTU size. Access the release notes for the VPN Client version that you are using.
|