Cisco VPN client vs OpenAFS for Windows

Jeffrey Altman <[email protected]> Tue, 04 Mar 2008 11:31:28 -0500
Newsgroups gmane.comp.file-systems.openafs.general,gmane.comp.file-systems.openafs.devel.win32
Organization Secure Endpoints Inc.
Message-ID <[email protected]>
Back in 2003/2004 when I started working on OAFW, there were 
communication problems with AFS and Cisco VPN clients which resulted in 
the addition of a restriction on the maximum MTU size used for Rx 
connections.   At the time I added the installation of the RxMaxMTU 
registry value (1260) by default because there was not a significant 
performance penalty associated with doing so.   OAFW is much faster 
today and setting the RxMaxMTU size to 1260 is no longer resulting in a 
3% to 4% performance penalty but up to 90% on 1Gbit connections.  Recent 
tests show that the Cisco VPN 5.0.01.600 client no longer prevents the 
use of AFS traffic.  As a result, unless I hear that I shouldn't, I am 
planning on removing the RxMaxMTU setting from the installers.

If this is going to be an issue for your organization, please speak up.

Thank you.

Jeffrey Altman
smime.p7s (application/x-pkcs7-signature, 3.3 KB) - not displayed