Security

 View Only
last person joined: 21 hours ago 

Ask questions and share experiences with Juniper Connected Security. Discuss Advanced Threat Protection, SecIntel, Secure Analytics, Secure Connect, Security Director, and all things related to Juniper security technologies.
  • 1.  Juniper SRX 1500 Maximum MTU

    This message was posted by a user wishing to remain anonymous
    Posted 09-16-2021 14:16
    This message was posted by a user wishing to remain anonymous

    Hi Team,

    Someone know the maximum MTU value for physical and virtual interface for Juniper SRX 1500.

    Thank You.


  • 2.  RE: Juniper SRX 1500 Maximum MTU

    Posted 09-16-2021 16:53
    The srx1500 supports mtu up to 9192

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Juniper SRX 1500 Maximum MTU

    Posted 09-17-2021 10:32
    Hi Steve,

    Thanks !

    ------------------------------
    Wilfried ABOU
    ------------------------------



  • 4.  RE: Juniper SRX 1500 Maximum MTU

    This message was posted by a user wishing to remain anonymous
    Posted 09-17-2021 12:14
    This message was posted by a user wishing to remain anonymous

    Hi Steve,

    If I have a design with Jumbo frame MTU 9000. 
    What is exact MTU Value should I to set in SRX1500 for crossing traffic ?
    What TCP MSS value should I to set too ?


  • 5.  RE: Juniper SRX 1500 Maximum MTU

    Posted 09-20-2021 05:59
    Juniper includes  header information in the mtu size so for untagged interfaces add 14 to your desired packet size and add 16 for tagged interfaces.

    But in most environments once going with jumbo frames I have generally seen running with the maximum allowed on the links.

    Naturally, both sides of connected interfaces need to be the same value to prevent mtu mismatch issues.

    MSS is typically driven more by the applications or tunneling in use across the network.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------