Results 1 to 3 of 3

Thread: MTU sizes

  1. #1
    Registered User
    Join Date
    Jul 2005
    Posts
    2
    Thanks
    0
    Thanked
    0 times in 0 posts

    MTU sizes

    Hello there,
    I work for a rather large organization and we have a little over 1000 pc's. Now we have just moved most of our sites to a private VPN and we have been havening problems with out MTU sizes. Since all out PC's MTU sizes are the default 1500 bytes when they hit the router they have to be fragmented into 2 packets cause of the VPN overhead. i was wondering if there is any way that we could change the MTU size on all the computers all at once, just not one at a time. I have been looking at a way to deploy a MSI with the correct registry changes, but that also hits a problem. In the registry every interface ID is different. So I don’t think I can make 1 MSI file to cover all the pc's we have.

    Anyone got any kind of suggestions for me?

  2. #2
    Ex-MSFT Paul Adams's Avatar
    Join Date
    Jul 2003
    Location
    %systemroot%
    Posts
    1,926
    Thanks
    29
    Thanked
    77 times in 59 posts
    • Paul Adams's system
      • Motherboard:
      • Asus Maximus VIII
      • CPU:
      • Intel Core i7-6700K
      • Memory:
      • 16GB
      • Storage:
      • 2x250GB SSD / 500GB SSD / 2TB HDD
      • Graphics card(s):
      • nVidia GeForce GTX1080
      • Operating System:
      • Windows 10 x64 Pro
      • Monitor(s):
      • Philips 40" 4K
      • Internet:
      • 500Mbps fiber
    By default the MTU size used by Windows is determined on a per-interface basis using PMTU - i.e. the client attempts to determine the MTU by asking routing devices between itself and the endpoint.

    If the router does not return a response then 1500 will most likely be used as a fallback, being the largest Ethernet size (without going into jumbo frames) and probably the value the remote machine responds with.

    Can the router not be set to respond to the ICMP queries to allow PMTU discovery?
    It would be much easier to set it there, in one place, and have the setup work as it should.

    As you have found, because the MTU size could be unique per interface on multi-homed machines, it resides in a location in the registry based on the interface GUIDs - so you cannot use a single registry file to set it globally.


    This would need to be scripted, or have a standalone executable to do it.
    (An alternative would be to set "EnablePMTUDiscovery" to 0, which forces an MTU of 576 bytes for all non-local traffic, but this would probably be a last resort.)

    It is also non-trivial to script, as how can you know which specific interface you wish to modify?
    Even the name cannot be used - a dual-port NIC would cause issues, or rolling out a script to hundreds of corporate laptops of different brands and models would make it tricky.


    The list of adapters on the system are stored in the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters

    There is a key under here for each adapter, named using its GUID.
    e.g. On my machine, my 2 adapters are:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{5A26501B-37F9-49A7-BDA3-A03F6BC18C0C}
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{E16657D9-AFD9-4F50-B14A-393C259E9521}


    (In addition to this there is a static key called "NdisWanIp".)

    For each adapter GUID listed, there should be a corresponding entry under this registry location:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
    This will most likely be a superset of the keys in the other location, don't expect a 1-1 relationship.

    The MTU size is configured per interface using the following key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID}
    Name: MTU
    Type: REG_DWORD
    Value: 88 (decimal) up to [maximum MTU supported by the underlying network]

    So, returning to my specific case, my keys would be:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5A26501B-37F9-49A7-BDA3-A03F6BC18C0C}\MTU
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E16657D9-AFD9-4F50-B14A-393C259E9521}\MTU



    You are probably already aware, but to check the maximum MTU size between you and a remote client, use the following command:
    ping -f -l x -n 1
    Where x is a number you want to test - start at 1400 which should work fine for a VPN, the remote client should reply as normal.
    When you enter a value for x which is higher than the MTU for that route, you will get a response of "Packet needs to be fragmented but DF set."

    Through trial & error you can find the highest MTU value.
    ~ I have CDO. It's like OCD except the letters are in alphabetical order, as they should be. ~
    PC: Win10 x64 | Asus Maximus VIII | Core i7-6700K | 16GB DDR3 | 2x250GB SSD | 500GB SSD | 2TB SATA-300 | GeForce GTX1080
    Camera: Canon 60D | Sigma 10-20/4.0-5.6 | Canon 100/2.8 | Tamron 18-270/3.5-6.3

  3. #3
    Member
    Join Date
    Aug 2003
    Posts
    73
    Thanks
    0
    Thanked
    0 times in 0 posts
    This is a useful GUI for tweaking your MTU and othr TCP/IP settings without editing the registry directly

    Jon

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. PRobably an old chestnut - AMD X2, cache sizes and overclocking
    By cah in forum PC Hardware and Components
    Replies: 20
    Last Post: 15-05-2005, 11:06 PM
  2. Avatar sizes
    By yamangman in forum General Discussion
    Replies: 3
    Last Post: 09-09-2004, 09:03 PM
  3. USA jean sizes?
    By Jimmy Little in forum General Discussion
    Replies: 2
    Last Post: 10-10-2003, 03:23 PM
  4. CRC Errors / MTU Adjustment
    By Jonny M in forum Networking and Broadband
    Replies: 2
    Last Post: 04-08-2003, 10:22 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •