Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

tcp-mss (Internet Options)

Syntax

Hierarchy Level

Description

Enable and specify the TCP maximum segment size (MSS) for IPV4 traffic in bytes.

When the device receives a TCP packet with the SYN bit and MSS option set, it examines the MSS value. If the MSS option specified in the packet is larger than the MSS you configured with the tcp-mss statement, the router replaces the MSS value in the packet with the lower value you configured.

Note:

This configuration statement is for transit packets. To adjust the TCP MSS for host-originated packets, see tcp-mss (Protocols BGP).

There are multiple factors that define the MSS value for TCP packets, which are reflected in the MSS value displayed in the output of the show system connections command:

  • The MSS value offered by the peer in the SYN packet.

  • Rounding the MSS off to the nearest multiple of 2048.

  • The MTU value of the interface.

  • The configured path MTU value.

  • Whether TCP sessions are not directly connected and path MTU discovery is disabled.

  • Whether the TCP sessions are on a directly-connected network.

This statement enables you to specify the MSS size in TCP SYN packets used during session establishment. Decreasing the MSS size helps to limit packet fragmentation and to protect against packet loss that can occur when a packet must be fragmented to meet the MTU size but the packet’s DF (don’t fragment) bit is set.

Note:

SRX Series Firewalls running in packet mode with MPLS do not support TCP MSS.

Options

bytes

TCP MSS value for SYN packets with a higher MSS value set.

  • Range: 64 through 65535 bytes.

  • Default: TCP MSS is disabled.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.2. Use Feature Explorer to confirm platform and release support for this feature.