ipsec negotiate-mtu

Function

The ipsec negotiate-mtu command sets the MTU value for IPSec negotiation packets.

The undo ipsec negotiate-mtu command restores the default MTU value for IPSec negotiation packets.

By default, the MTU value of IPSec negotiation packets is 1500.

Format

ipsec negotiate-mtu [ mtu-value | ipv6 ipv6-mtu-value ]

undo ipsec negotiate-mtu [ ipv6 ]

Parameters

Parameter	Description	Value
mtu-value	Specifies the IPv4 MTU value.	The value range of the parameter is subject to the specific device model. Please refer to the actual data in practice.
ipv6 ipv6-mtu-value	Specifies the IPv6 MTU value.	The value range of the parameter is subject to the specific device model. Please refer to the actual data in practice.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

If the MTU of an IPSec negotiation packet is greater than the MTU of an interface, the IPSec negotiation packet will be fragmented for the second time. In this case, you can run the ipsec negotiate-mtu command to tune the MTU value of the IPSec negotiation packet. After an MTU value for IPSec negotiation packets is set, IPSec negotiation packets are fragmented based on this MTU value.

Example

# Set the MTU value to 1200 for IPv4 IPSec negotiation packets.

<sysname> system-view
[sysname] ipsec negotiate-mtu 1200