Change MTU for just one Site-to-Site VPN between ASAs?

Hi -
I'm setting up a Site-to-Site Cisco VPN between ASAs. I'm being told by the remote site engineer to set the maximum MTU at 1362.
Is it possible to set the MTU for one specific site-to-site VPN on my ASA 5510 Security Plus to MTU 1362? I see my interfeces are all set at 1500.
If not, would you recommend I setup a subinterface on my inside network router and a subinterface on the ASA with an MTU of 1362 to get around this issue? Then use this subinterface for traffic from my inside network to transverse through prior to hitting the VPN.
Thank you.

I would not worry too much about UDP traffics. I rather concentrate on TCP traffics because almost all of the issues will be TCP.
Therefore, I would set the MSS value to 1362 or may be like 1300: sysopt connection tcp-mss 1300
That will solve most of your issues.

Similar Messages

I chose a template for the free partner site but want to change it for another one

I chose a template for the free partner site but want to change it for another one. Is there anyway this is possible and to start again? Been looking for hours to fix this and kinda got frustrated and deleted most of the code.....

I had the same problem.
I wanted to test the free site with a dummy site first but I since I can't delete the dummy site now to start afresh, I have no choice but to go elsewhere.

Does Apple allow a price reduction for just one week?

Does Apple allow a price reduction for just one week?
I can't seem to get a definitive answer from their web site.
A one week Spring Sale for two books ~ it it OK with Apple?
Thanks
Bruce

Thanks very much vinnvg ~ I was just checking in case Apple had a policy about not allowing a temporary price cut.
Thanks for the reminder on how to do it.
Bruce

How do I make a transpose/octave button for just one instrument in a split?

I work in mainstage 2.2.2 with patches that are using splits, and I want to make an octave button for just one instruments in a patch. Suggestions? (If I press the octave button in my keyboard, the whole split point moves, no good...)
Benny

An octave button for just one instrument will work for some instruments. EVB3, ESX24, ESM and a few others can be assigned. However I was unable to make it work with EVP88 and ES2. Try this example: in layout mode set up a button(or buttons) on your controller keyboard for changing octaves. In edit mode add a channel strip and select an ESX24 instrument. Select the screen control button you want to assign in the workspace. In the screen control inspector, select the mappings tab. The list below will say unmapped. Double-click on it. Select the instrument in the list. Another list to the right will appear. Select ESX24 (Sampler). In the column to the right, select the pitch folder, then select transpose. To the right, you'll see saved value, button on and button off values. This should get you started. Some of the instruments have different menus, so they'll be a little different. Have fun with it.

How can I turn off imessage for just one of my contacts? Me and my husband just upgraded (both had iphone 4), I got the iphone 5s and he got he note 3. All my text to him automatically send as a imessage. Ive tried to delete his contact and then went back

How can I turn off imessage for just one of my contacts? Me and my husband just upgraded (both had iphone 4), I got the iphone 5s and he got he note 3. All my text to him automatically send as a imessage. Ive tried to delete his contact and then went back in and reentered it but that doesnt work.

Have your husband text the word "stop" to 48369. This should take his number out of the iMessage system.
Go into your settings under messaging and make sure the box to send as an SMS if iMessage is unavailable is checked.
Hopefully this will get your messages sending/receiving to each other.

How do I turn on my wireless keyboard and make it 'discoverable'? I got a message that the batteries were low, so I changed them for new ones and now the keyboard doesn't work.

I got a message saying that the batteries were low, so changed them for new ones and now the keyboard cannot be 'found'. There seems to be no way to turn it on and make it 'discoverable' to the system. At the moment I'm typing this on a spare keyboard plugged into the back of my mac via a USB. Please help!

Have you checked to make sure the batteries are inserted the correct way? Have you tried to turn it on by pushing the right upper (round) edge of the keyboard - if you do that, do you see a tiny little green light? Since you have a wired keyboard, can you get to the Bluetooth setup/preference pane so you can manually try to sync the keyboard?
PS - posting duplicate posts is not helpful - it makes things too confusing, so I've asked the hosts to remove your other (identical) post.

How do I make a transpose button for just one instrument in a split? (mainstage)

I work in mainstage 2.2.2 with patches using splits and I want to make an octave button for just one instruments in a patch. Suggestions?
Benny

Depending on your virtual instrument you can assign octave to a MIDI control. If you assign all of them to the same control on every track then that would be the effect, but like I said before, it really depends on which instruments you use.

EAM ID based or Role based? Why settle for just one?

G'Day All,
I've raised a question in the following blog, however I would like to open it up to other people as well so they might get something out of it and in the process might share their own thoughts on the matter at hand.
ID-Based Firefighting vs. Role-Based Firefighting
So this is where I am at this point:
From what I can gather so far, my understanding of EAM ID/ROLE based is as follows:
- Id Based: Logs in using own U.ID and through GRAC_SPM accesess FFID from the GRC Server and logs into the system assigned to them (ECC, SRM, CRM etc)
Only one user at a time can use a FFID.
Firefighter need not exist in every system assigned to them due to central logon however they need to exist in the GRC system
Knows exactly when FFID is being used as he/she has to login so has a psychological effect (good thing)
Better tracking of FF tasks - Specific log reports with Reason Codes. Bonus point from Auditors!
Two Log ins so potential to commit fraud. (1 action using own UserID and 1 action using FFID)
Could be hard to track and find out when a fraud has been committed so can be a problem with auditors.
      ID Based -> GRAC_SPM : TCode for Centralised FFighting -> You will see FFIDs assigned to you
      ID Based -> /n/GRCPI/GRIA_EAM : TCode for DCentralised FFighting -> You can see the FFIDs assigned to you
- Role Based: Logs into the remote system only using U.ID, so everything gets logged against that one ID.
Multiple users can use the FFROLE at once.
Firefighter has to exist in every system assigned to them - so multiple logons.
Hard to differentiate between FF tasks and normal tasks as no login required So easy to slip up
Time consuming to track FF tasks - No Specific log reports. No Reason Codes
     R.Based -> GRAC_SPM : TCode for Centralised FFighting -> You will see FFROLEs
     R.Based -> /n/GRCPI/GRIA_EAM : TCode for DCentralised FFighting -> Not applicable so wont work
So based on this there are pros and cons in both however according to SAP only one can be used. To me personally, it makes more sense to get the best of both the worlds right? So here is my question why can’t we just use both?
    . Really critical tasks -> FFID
    . Normal EAM tasks -> FFRole
Alessandaro from the original post pointed this out:
"Per design it isn't possible to achieve both types of firefighting at the same time. It's a system limitation and hence to configurable."
Well this is what I can't seem to get my head around. For a FFID, there is a logon session so it has to be enabled and as far as I can tell there is no way around it.
However for FFRole, there isn't such limitations/restrictions like starting a separate session. FFRole is just assigned to an end user for him/her to perform those tasks using their own user ID.
So in what way is it different from any of their other tasks/roles, other than the fact that they've got an Owner/Controller assigned to the FFRole? and
What is stopping us from using it when ID based is the default?
If I were to do the following does it mean I can use both ?
    . Config Parameter: 4000 = 1 (GRC System) -> ID Based
    . Config Parameter: 4000 = 2 (Plug-In) - > Role Based
Please excuse me if my logic is a bit silly, Role Based firefighting is only done on Plug-in systems so the following should work just fine:
   . Config Parameter: 4000 = 2 (Plug-In) - > Role Based
However for ID based, it is a Central Logon, so the following is a must:
    . Config Parameter: 4000 = 1 (GRC System) -> ID Based
Which means both ID/Role based can be used at the same time, which seems to be working just fine on my system. Either way I leave it you experts and I hope you will shed some light on it.
Cheers
Leo..

Gretchen,
Thank you for thoughts on this.
Looks like I'm failing to articulate my thoughts properly as the conversation seems to be going in a different direction from what I am after. I'll try once more!
My query/issue is not in regards to if/what SAP needs to do about this or why there isn't more support from Companies/Organizations and not even, which one is a better option.
My query is what is stopping us(as in the end users ) from using both ID/Role based at the same time?
Now before people start referencing SAP documentation and about parameter 4000, humour me with the following scenario please. Again I would like to reiterate that I am still in the learning phase so my logic might be all wrong/misguided, so please do point out to me where I am going wrong in my thought process as I sincerely would like to know why I am the odd one out in regards to this.
Scenario
I've created the following:
FFID
FFROLE
Assigned them to, two end users
John Doe
Jane Doe
I set the Configuration Parameters as follows:
IMG-> GRC-> AC-> Maintain Configuration Settings -> 4000:1 - ID Based
IMG-> GRC (Plug-in)-> AC-> Maintain Plug-In Configuration Settings-> 4000:2 - Role Based
User1
John Doe logs into his regular backend system (ECCPROD001)-> executes GRAC_SPM-> Enters the GRC system (GRCPROD001)-> Because the parameter is set to ID based in the GRC Box, so he will be able to see the FFID assigned to him-> and will be presented with the logon screen-> Logs in -> Enters the assigned system (lets say CRMPROD001) At this point the firefighting session is under progress
User2
Jane Doe logs into her regular backend system (ECCPROD001) -> (can execute GRAC_SPM to check which FF Role has been assigned to her but she can see that in her regular menu, so there is no point) -> Executes the transactions assigned in FFROLEThis is done at the same time while FFID session is in progress
So all I want to know is if this scenario is possible? if the answer is No, then why not?
I physically carried out this scenario in my system and I had no problems(unless I am really missing the plot here), which brings me back to my original question: Why settle for just one?
Again to reiterate I am not getting into the efficacy or merits of this or even if one should use this. Just want to know if it is possible/feasible or not.
So there you have it. That's the whole enchilada(as they say there in Texas). I tried to word my thoughts as concisely as I can, if there are still any clarifications, more information you or anyone else reading this would like, please do let me know.
Regards,
Leo..

Is it possible to add a user or license for just one app?

I have a complete Adobe Creative Cloud license. Is it possible to add a user or license for just one app? What are the monthly costs?

Cloud Plans https://creative.adobe.com/plans
-and subscription terms http://www.adobe.com/misc/subscription_terms.html

Why cant i use a bought call-tone bought through I-tones for calling tones for just one of my contacts?

Why cant i use a bought call-tone bought through I-tones for calling tones for just one of my contacts?

What makes you believe that you can't? To set a custom ringtone (or SMS tone) for a contact, go to that contact entry, tap the Edit button in the upper right. You can then edit both ringtones and SMS tones for that contact.

Can I sign up for adobe acrobat for just one month?

can I sign up for adobe acrobat for just one month?

That is not clear to me since they only appear to offer Anuual and Prepaid Annual options. You can always go with the free 30 day trial if you haven't already.

I have lightroom. My photos are stored on an external disk drive with a backup disk. With iCloud, will all of my photos go to the cloud? Will I still need the external drives? Is the $9.99 per month for just one year or for always?

I am an amateur photographer and have lightroom. My photos are stored on an external disk drive with a backup disk. With iCloud, will all of my photos go to the cloud? Will I still need the external drives? Is the $9.99 per month for just one year or for always?

If the iTunes database files are on that drive, launch iTunes with the Shift key(Windows) or Option key(Mac OS X) held down, select Choose Library, and navigate to it. The computer may need to be authorized to play protected content, and if the library contains rented movies, those won't play.
If not, import the content to an iTunes library.
(100371)

Spool printing takes a long time for just one user

Hello,
Could someone please guide on what could be the reason that spool printing takes a long time for just one user ?
I've monitored all the spool processes through SM50, and I've found that a very long time elapses before the printing job appears in one of the four spool processes.
Thanks in advance.
Reda

Hi,
very long time elapses before the printing job appears in one of the four spool processes.
can u check the trace file(Red color error) of that spool process. Also can u see if there are any system logs in SM21 related to that spool request.
Also see how many pages the user is giving print @ 1 shot. Suppose if the printer to whcih the user is giving print is a network printer, see the network response time.
Have u tried to ask the same user to give print to some other printer. Also have u asked some other user to print to that problematic printer. Check the responses under this scenario also.
Regards,
Ravi

Anonymous access for just one page

Does anybody knows how can i enable anonymous access for just one page, other pages must be available for only logged in users.

Actually it is "LightHouse Pro" project. And I don't understand some things in it. It Has a UserControl with a query that just check credentials and returns bool value if credentials are right. But i can't find the way it defines whether i need to secure page or not.

Notifications for just one email account?

hi all.
I have many email accounts, including one that was set up to push time-sensitive email messages to me.
I don't need notifications for any of the accounts except for the time-sensitive account (which is a gmail push account).
does anyone know how to enable Mail Notifications (Lock Screen and Alerts) for just one email account?
cheers,
Gregory

You can't

Change MTU for just one Site-to-Site VPN between ASAs?

Similar Messages

Maybe you are looking for