FTP over VPN MTU/MSS Issues?



Hello experts. Please advise! (Sorry for the long winded explenation,
but I want to make sure you have all of the information)

The company I work for has about 30 laptops (all are IBM ThinkPad -
Windows XP Professional) belonging to sales reps that work out of the
office. They must connect to the VPN or RRAS servers while "on the
road" in order to send orders and receive updates. The problem I am
experiencing is as follows:

ONLY a handful of machines are unable to ONLY download files using FTP
(active or passive) while connected to the VPN unless the data fits
into a single packet (If all of the data fits into a single packet, the
transmission works perfectly; and when sending orders over this same
connection, no matter the size of the transmission, it works perfectly)
(Most computers are have no problems with downloading multiple packet
transmissions, even when using the exact same internet connection at
the same time; side-by-side). This problem appears to occur if the
data being received needs to be fragmented into multiple packets. The
computers that APPEAR to be affected are all of the machines that have
been, at one time or another, restored (using the restore partition on
the hard drive)

I believe the problem is a result of the MTU or MSS. The MTU on the
computers that are experiencing this problem seem to be larger than
that of the computers that are functioning properly. I have found a
way to change the MTU to a smaller size, but this doesn't seem to
resolve the issue. When using Ethereal on both client and server
machines, it shows the server stating that it will be sending packets
of a certain size (ie 1020 or so) and the client machine replies with a
confirmation that this size is acceptable. But when the server sends
the data, it is sent with larger size packets (ie 1400 or so) and the
client machine never even sees this attempt. I do not know where to
change the MSS and honestly don't know the difference between the MTU
and MSS, or if this will even make a difference.

Does anybody have any idea why this is happening? Future thanks for
all of the help!

.



Relevant Pages

  • FTP over VPN
    ... ONLY a handful of machines are unable to ONLY download files using FTP ... into a single packet (If all of the data fits into a single packet, ... computers that APPEAR to be affected are all of the machines that have ... When using Ethereal on both client and server ...
    (microsoft.public.windows.server.networking)
  • Re: FTP over VPN
    ... ONLY a handful of machines are unable to ONLY download files using FTP ... into a single packet (If all of the data fits into a single packet, ... computers that APPEAR to be affected are all of the machines that have ... I believe the problem may be a result of the MTU or MSS. ...
    (microsoft.public.windows.server.networking)
  • Re: MTU problem DSL/CABLE Router - Firwall upgrade
    ... the Netgear was too large. ... "Setting your computer's MTU value too low would make downloading less ... efficient because a greater percentage of the packet is taken up by the ... Other computers on the Internet might not be able to handle MTU ...
    (comp.security.firewalls)
  • Re: MSS on router, why?
    ... The proper way to describe the ICMP packet which is supposed to be ... returned by a router which cannot forward the IP packet which is too ... Because ICMP was defined before Path MTU Discovery (1981 and 1990 ... fragmentation and try to use path MTU discovery, ...
    (comp.dcom.sys.cisco)
  • Re: Strange MTU Problem
    ... When I was just playing with the MTU and leaving the MRU and stuff alone, ... this is the largest sized packet you will transmit. ... As most serial connections are substantially faster than that, ...
    (comp.os.linux.networking)