Description

NetScreen-Remote with a PPPoE connection cannot map drives

Symptoms

Can map drives using IP address
NetScreen-Remote clients with a PPPoE connection cannot map drives using resolved names

Solution

There are some Point to Point Protocol over Ethernet (PPPoE) authentication servers that cannot handle fragmentation. Because there is not a Maximum Segment Size (MSS) or Maximum Transmission Unit (MTU) option on NetScreen-Remote, the packet size cannot be changed when the client initiates a packet.

If set flow tcp-mss is used on the NetScreen, it will only negotiate the MSS for traffic that is initiated from the trusted network (outgoing traffic).

Suggestion: Use set flow all-tcp-mss
to negotiate for all directions.

First set the MSS to 1340 then verify if everything works.

set flow all-tcp-mss 1340 [Enter]
save [Enter]

If successful, increase the MSS value by 5 until it fails. The use the last MSS value that works, these extra steps will fine tune your connection.

A second solution is to download a MTU registry hack utility on the PC, then set the PC's MTU to 1340 or the highest value that works.

Here is the problem or goal:

  • NetScreen-Remote clients with a PPPoE connection cannot map drives using resolved names
  • NetScreen Remote with PPPoE Cannot Map Drives

Problem Environment:

  • Can map drives using IP address

Applicable Products:

  • NetScreen-Remote


Former Article Id

nskb895