Change MTU on Domain controller

  • Thread starter Thread starter jcharth
  • Start date Start date
J

jcharth

Hello I have a few domain controllers that can see eachother if mtu of
1500, they are all connected with ipsec tunnels. Would changing the mtu
to 1250 have any negative effects? I can change it on the desktop only
too but it would be more work.
THanks.
 
In
Hello I have a few domain controllers that can see eachother if mtu of
1500, they are all connected with ipsec tunnels. Would changing the
mtu to 1250 have any negative effects? I can change it on the desktop
only too but it would be more work.
THanks.
Click to expand...

We usually leave that alone. Altering MTUs may negate certain types of
traffic. Good example is IE browser traffic is affected when the MTU is set
to 1492, as ADSL routers do for the 8 byte PPPoE overhead. I'm not sure what
other effects it may cause with LDAP or any other domain controller required
communications if changed from the default 1500 bytes.

May I ask what specific reason you want to lower it? Did you read it in a
specific article or elsewhere? If so, can you provide a link?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Microsot Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================
 
I was having difficult to access the server remotely over an ipsec
tunnel. I actully did change the mtu and so far not mayor problems. I
am wondering may be changing the mtu in the router internal interface
could have the same effect, I believe the best thing to do is to change
the mtu in the clients.

Thanks
 
In
I was having difficult to access the server remotely over an ipsec
tunnel. I actully did change the mtu and so far not mayor problems. I
am wondering may be changing the mtu in the router internal interface
could have the same effect, I believe the best thing to do is to
change the mtu in the clients.

Thanks
Click to expand...

As I said, MTU changes may affect communication. I remember two separate
clients with VPNs between locations had an MTU of 1492 and none of the DCs
would replicate. It took me two days to figure this one out. After we set
them to 1500 all was well.

If you intend to play with the non-default MTUs, I would monitor it very
very closely.

Ace
 
At first i change the mtu to 1250 and the file transfer were really
slow. so i try to set it back to 1500 and no luck. So use this utility
called tz connection buster on the server that adjusts the all the
parameters and i set it up to modem speed. this was the only setting
with mtu under 1500. So far it is replicating the and mtu is small
enough to do the job. It looks like changing the mtu alone would cause
problems.
THanks.
 
In
At first i change the mtu to 1250 and the file transfer were really
slow. so i try to set it back to 1500 and no luck. So use this utility
called tz connection buster on the server that adjusts the all the
parameters and i set it up to modem speed. this was the only setting
with mtu under 1500. So far it is replicating the and mtu is small
enough to do the job. It looks like changing the mtu alone would cause
problems.
THanks.
Click to expand...

Interesting you got it to work this way. Let me know if any probs arise.

Ace
 
Back
Top