PIX515E telnet problem

Jul 10, 2006 2 Replies

Hi, when I telnet my PIX515E ,use sh log/sh conn command, then this telnet process will be dead. Has anyone encountered this problem? thx!



PIX# sh version



Cisco PIX Security Appliance Software Version 7.0(4) Device Manager Version 5.0(4)



Compiled on Thu 13-Oct-05 21:43 by builders System image file is "flash:/image" Config file at boot was "startup-config"



PIX up 5 days 15 hours



Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz Flash E28F128J3 @ 0xfff00000, 16MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB



0: Ext: Ethernet0 : address is 0017.9514.7235, irq 10 1: Ext: Ethernet1 : address is 0017.9514.7236, irq 11

Licensed features for this platform: Maximum Physical Interfaces : 3 Maximum VLANs : 10 Inside Hosts : Unlimited Failover : Disabled VPN-DES : Enabled VPN-3DES-AES : Enabled Cut-through Proxy : Enabled Guards : Enabled URL Filtering : Enabled Security Contexts : 0 GTP/GPRS : Disabled VPN Peers : Unlimited



This platform has a Restricted (R) license.



Serial Number: 810173229 Running Activation Key: 0xe82e2c71 0xb4a490d7 0xb8810da0 0xb704fc0c



0xcd1fd996 Configuration last modified by enable_15 at 02:58:28.445 UTC Tue Jul 11
2006

the message in logging buffer when the telnet process is dead:

"Jul 11 2006 14:39:15: %PIX-4-419001: Dropping TCP packet from NP Identity Ifc:13

4.66.181.1/23 to inside:134.66.181.13/20994, reason: MSS exceeded, MSS 1380, dat a 1460"

why? each mtu is 1500.

"sysopt connection tcpmss 1460"

all is ok

zippor wrote:

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required