Fortinet black logo

Changes in CLI defaults

Changes in CLI defaults

Bug ID

Description

672183

Disable IHP IPsec anti-replay, and also use large MTU check values in NAT traversal sessions to avoid fragmentation and MTU exceptions. This affects the FG-3800D.

config system npu
    set uesp-offload  {enable | disable}
end

697566

Allow ip_no_pmtu_disc to be set manually under config system global by adding am option to configure PMTU discovery. This value will set the kernel value for ip_no_pmtu_disc (default = 1).

config system global
    set pmtu-discovery {enable | disable}
end

Changes in CLI defaults

Bug ID

Description

672183

Disable IHP IPsec anti-replay, and also use large MTU check values in NAT traversal sessions to avoid fragmentation and MTU exceptions. This affects the FG-3800D.

config system npu
    set uesp-offload  {enable | disable}
end

697566

Allow ip_no_pmtu_disc to be set manually under config system global by adding am option to configure PMTU discovery. This value will set the kernel value for ip_no_pmtu_disc (default = 1).

config system global
    set pmtu-discovery {enable | disable}
end