[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

gre-out

Syntax



gre-out {
mss     
        value           ;
}

Hierarchy Level



[edit security flow tcp-mss]

Release Information

Statement introduced in Release 8.5 of JUNOS software.

Description

Enable and specify the TCP maximum segment size (TCP MSS) for Generic Routing Encapsulation (GRE) packets that are going into an IPsec VPN tunnel. If the device receives a GRE-encapsulated TCP packet with the SYN bit and TCP MSS option set and the TCP MSS option specified in the packet exceeds the TCP MSS specified by the device, the device modifies the TCP MSS value accordingly. By default, a TCP MSS for GRE packets is not set.

This statement is supported on J-series and SRX-series devices.

Options

mss value —TCP MSS for GRE packets. Value is optional.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]