clamp

This option limits the TCP MSS (Maximum Segment Size) to the size of the MTU (Maximum Transmission Unit) discovered by path MTU discovery for the inner protocol. This ensures the packet traverses through the inner protocol without fragmentation. This option is enabled by default.

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

clamp tcp-mss

Parameters

clamp tcp-mss


tcp-mss	Limits the TCP MSS size to the MTU value of the inner protocol for tunneled packets

Examples

nx9500-6C8809(config-fw-policy-test)#clamp tcp-mss

nx9500-6C8809(config-fw-policy-testFW)#show context include-factory | include clamp
clamp tcp-mss
nx9500-6C8809(config-fw-policy-testFW)#

Related Commands


no	Disables limiting of the TCP MSS