In order to adjust the MSS of your traffic on a vRouter, also known as MSS clamping, a policy route is defined. Once the policy route is created it is then assigned to the outside interface.
MSS Clamping is typically used for IPSEC based traffic to ensure that traffic does not exceed the MTU of the path, due the additional overhead that the IPSEC represent.<\/p>\n
Below is an example based on clamping IPSEC traffic,<\/p>\n
set policy route MSS-CLAMP rule 10 source address <LOCAL_ENCDOM>
set policy route MSS-CLAMP rule 10 destination address <REMOTE_ENCDOM><\/span>
set policy route MSS-CLAMP rule 10 protocol tcp<\/span>
set policy route MSS-CLAMP rule 10 set tcp-mss 1300
set policy route MSS-CLAMP rule 10 tcp flag SYN
<\/span>
set interfaces ethernet eth1 policy route MSS-CLAMP<\/pre>\n","protected":false},"excerpt":{"rendered":"