We're trying to test having all satellite offices use the internet through our VPN instead of having their own connection.
Our 1720 is connected to a T-1 that gets us to the net. All PC's internal can surf anywhere.
I am connected to an 806 router connected via DSL coming in through VPN. With it I can surf some but not all websites. Setting MTU to 1460 on the PC allows me to surf everything. I've set the inbound and outbound access-list on the 1720 to allow icmp packet-too-big, and unreachable on the inbound. I also have adjust-mss set to 1452 on all the ports on the 806 router I'm connected to and mtu set to 1492 on Dialer0.
Any other ideas?
Our 1720 is connected to a T-1 that gets us to the net. All PC's internal can surf anywhere.
I am connected to an 806 router connected via DSL coming in through VPN. With it I can surf some but not all websites. Setting MTU to 1460 on the PC allows me to surf everything. I've set the inbound and outbound access-list on the 1720 to allow icmp packet-too-big, and unreachable on the inbound. I also have adjust-mss set to 1452 on all the ports on the 806 router I'm connected to and mtu set to 1492 on Dialer0.
Any other ideas?