tIPsecTnlTempPublicTcpMssAdjust
TIMETRA-IPSEC-MIB ·
.1.3.6.1.4.1.6527.3.1.2.48.17.1.23
Object
column
r/w
octets Integer32
The value of tIPsecTnlTempPublicTcpMssAdjust specifies the Maximum
Segment Size (MSS) for the TCP traffic in an IPsec tunnel which is
sent from the public network to the private network. The system may
use this value to adjust or insert the MSS option in TCP SYN packet.
The TCP MSS adjustment functionality on the public side network is
disabled when the following conditions are met.
1) The value of tIPsecTnlTempPublicTcpMssAdjust is '-1' or
2) The values of tIPsecTnlTempPublicTcpMssAdjust and
tIPsecTnlTempEncapIpMtu are both '0'.
When the system receives a TCP SYN packet from the public network and
this packet contains an MSS option, the system replaces the MSS option
value with a new MSS when the new MSS is smaller than the MSS option
value.
When the system receives a TCP SYN packet from the public network and
this packet does not contain an MSS option, the system inserts one
with a new MSS.
The new MSS is calculated based on the following rules.
1) When the value of tIPsecTnlTempPublicTcpMssAdjust is '0' and
tIPsecTnlTempEncapIpMtu has a non-zero value,
New MSS = tIPsecTnlTempEncapIpMtu - total header size (e.g.,
encryption, encapsulation, TCP and IP headers)
2) When the value of tIPsecTnlTempPublicTcpMssAdjust is in the range
of (512..9000)
New MSS = tIPsecTnlTempPublicTcpMssAdjust
Context
- MIB
- TIMETRA-IPSEC-MIB
- OID
.1.3.6.1.4.1.6527.3.1.2.48.17.1.23- Type
- column
- Access
- readwrite
- Status
- current
- Units
- octets
- Parent
- tIPsecTnlTempEntry
- Table
- tIPsecTnlTempTable
- Siblings
- 18
Syntax
octets Integer32
Values & Constraints
Object Constraints
range: -1-0
range: 512-9000
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tIPsecTnlTempId The value of tIPsecTnlTempId specifies the id of a tunnel template
entry and is the primary index for the table tIPsecTnlTempTable. | column | TIMETRA-TC-MIBTmnxIPsecTunnelTemplateId | .1.3.6.1.4.1.6527.3.1.2.48.17.1.1 |
| tIPsecTnlTempReplayWindow The value of tIPsecTnlTempReplayWindow specifies the size of the
anti-replay window for the template.
If the value of tmnxIPsecTunnelReplayWindow is set to 0, then … | column | Unsigned32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.10 |
| tIPsecTnlTempIpMtu The value of tIPsecTnlTempIpMtu specifies the MTU size for IP packets
for this tunnel.
A value set to zero indicates maximum supported MTU size on the SAP
for this … | column | Unsigned32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.11 |
| tIPsecTnlTempEncapIpMtu The value of tIPsecTnlTempEncapIpMtu specifies the MTU size for IP
packets after tunnel encapsulation has been added.
A value set to zero indicates maximum supporte… | column | Unsigned32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.12 |
| tIPsecTnlTempIcmp6Pkt2Big The value of tIPsecTnlTempIcmp6Pkt2Big specifies whether
packet-too-big ICMP messages should be sent. When it is set to 'true',
ICMPv6 packet-too-big messages are generated by thi… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.3.1.2.48.17.1.14 |
| tIPsecTnlTempIcmp6NumPkt2Big The value of tIPsecTnlTempIcmp6NumPkt2Big specifies how many
packet-too-big ICMPv6 messages are transmitted in the time frame
specified by tIPsecTnlTempIcmp6Pkt2BigTime.
… | column | Unsigned32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.15 |
| tIPsecTnlTempIcmp6Pkt2BigTime The value of tIPsecTnlTempIcmp6Pkt2BigTime specifies the time frame in
seconds that is used to limit the number of packet-too-big ICMPv6
messages transmitted per time frame.
… | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.16 |
| tIPsecTnlTempClearDfBit The value of tIPsecTnlTempClearDfBit specifies whether to clear Do not
Fragment (DF) bit in the outgoing packets for tunnels created using
this template. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.3.1.2.48.17.1.17 |
| tIPsecTnlTempRowStatus The tIPsecTnlTempRowStatus object is used to create and delete rows in
the tIPsecTnlTempTable. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.6527.3.1.2.48.17.1.2 |
| tIPsecTnlTempPrivateTcpMssAdjust The value of tIPsecTnlTempPrivateTcpMssAdjust specifies the Maximum
Segment Size (MSS) for the TCP traffic in an IPsec tunnel which is
sent from the private network to the public … | column | octets Integer32 | .1.3.6.1.4.1.6527.3.1.2.48.17.1.24 |
| tIPsecTnlTempIgnoreDefaultRoute The value 'false' for tIPsecTnlTempIgnoreDefaultRoute will cause the
IPsec gateway to remove dynamic lan-to-lan tunnels whenever IKE
negotiates a
remote traffic selector containin… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.3.1.2.48.17.1.25 |
| tIPsecTnlTempLastChanged The value of tIPsecTnlTempLastChanged indicates the sysUpTime at the
time of the last modification of this entry.
If no changes were made to the entry since the las… | column | SNMPv2-TCTimeStamp | .1.3.6.1.4.1.6527.3.1.2.48.17.1.3 |
| tIPsecTnlTempDescr The value of tIPsecTnlTempDescr specifies the user-provided
description for the template. | column | TIMETRA-TC-MIBTItemDescription | .1.3.6.1.4.1.6527.3.1.2.48.17.1.4 |
| tIPsecTnlTempReverseRoute The value of tIPsecTnlTempReverseRoute specifies whether node using
this template will accept framed-routes sent by radius server and
install them for the lifetime of the tunnel a… | column | Enumeration | .1.3.6.1.4.1.6527.3.1.2.48.17.1.5 |
| tIPsecTnlTempDynKeyTransformId1 The value of tIPsecTnlTempDynKeyTransformId1 specifies the first
transform-id for this IPSec Tunnel template to use. | column | TmnxIPsecTransformIdOrZero | .1.3.6.1.4.1.6527.3.1.2.48.17.1.6 |
| tIPsecTnlTempDynKeyTransformId2 The value of tIPsecTnlTempDynKeyTransformId2 specifies the second
transform-id for this IPSec Tunnel template to use. | column | TmnxIPsecTransformIdOrZero | .1.3.6.1.4.1.6527.3.1.2.48.17.1.7 |
| tIPsecTnlTempDynKeyTransformId3 The value of tIPsecTnlTempDynKeyTransformId3 specifies the third
transform-id for this IPSec Tunnel template to use. | column | TmnxIPsecTransformIdOrZero | .1.3.6.1.4.1.6527.3.1.2.48.17.1.8 |
| tIPsecTnlTempDynKeyTransformId4 The value of tIPsecTnlTempDynKeyTransformId4 specifies the fourth
transform-id for this IPSec Tunnel template to use. | column | TmnxIPsecTransformIdOrZero | .1.3.6.1.4.1.6527.3.1.2.48.17.1.9 |