| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| I have a Site to Site VPN both NG AI R55 when i'm open a ssh connection from one site to the other i can work untill it's stuck it happens when i'm trying to see a lot of data (ex. ls -R ) sometimes it's happen and sometimes not anyone have a solution for me ? |
| |||
| It can be an MTU issues (small packets leaks, big one need to be fragmented, but DF=1. Packet need to be dropped. Information ICMP message about this incident missed out somewhere during transfer). Try to drill down to the Microsoft and CheckPoint Tech support articles. Keywords: EnablePMTUBHDetect EnablePMTUDiscovery ping x.x.x.x -l 1500 -f |
| |||
| That's it. Sometimes MTU discovery fails somewhere inbeetween of you firewalls. At this moments big SSH data transfers fails. You can do a test: 1. (optional) Disable MTU Discovery on the SSH server (I'm not sure how to do this on unix) 2. Set MTU on SSH server to 1300 (fconfig interface_name mtu 1300) 3. Try whatever big commands you want (ls -la, or something like this) thought you Site to site VPN |
![]() |
| Thread Tools | |
| Display Modes | |
| |