PIX515E telnet problem

Hi, when I telnet my PIX515E ,use sh log/sh conn command, then this telnet process will be dead. Has anyone encountered this problem? thx!

PIX# sh version

Cisco PIX Security Appliance Software Version 7.0(4) Device Manager Version 5.0(4)

Compiled on Thu 13-Oct-05 21:43 by builders System image file is "flash:/image" Config file at boot was "startup-config"

PIX up 5 days 15 hours

Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz Flash E28F128J3 @ 0xfff00000, 16MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: Ext: Ethernet0 : address is 0017.9514.7235, irq 10 1: Ext: Ethernet1 : address is 0017.9514.7236, irq 11

Licensed features for this platform: Maximum Physical Interfaces : 3 Maximum VLANs : 10 Inside Hosts : Unlimited Failover : Disabled VPN-DES : Enabled VPN-3DES-AES : Enabled Cut-through Proxy : Enabled Guards : Enabled URL Filtering : Enabled Security Contexts : 0 GTP/GPRS : Disabled VPN Peers : Unlimited

This platform has a Restricted (R) license.

Serial Number: 810173229 Running Activation Key: 0xe82e2c71 0xb4a490d7 0xb8810da0 0xb704fc0c

0xcd1fd996 Configuration last modified by enable_15 at 02:58:28.445 UTC Tue Jul 11 2006
Reply to
zippor
Loading thread data ...

the message in logging buffer when the telnet process is dead:

"Jul 11 2006 14:39:15: %PIX-4-419001: Dropping TCP packet from NP Identity Ifc:13

4.66.181.1/23 to inside:134.66.181.13/20994, reason: MSS exceeded, MSS 1380, dat a 1460"

why? each mtu is 1500.

Reply to
zippor

"sysopt connection tcpmss 1460"

all is ok

zippor wrote:

Reply to
zippor

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.