Connection issue with 2 PPPOE connect

[LM-Rafael]

Hi everybody,

i have a strange issue with my new Check Point 3600. I have two Internet connections (PPPoE 1 and PPPoE 2).

Some sites run and some not at all.

Under attachments you will see an network diagram.

In particular, the page: duckduckgo.com does not work at all. A Ping to ip and DNS of duckduckgo.com is possible and working fine. But when i will open the page in my browser i get a "Connection was reset" error after some seconds.

Sometimes it takes a long time to access other websites.

The second Internet line is not so important for now. The setup will come later.

How can i solve this issue?  I am asking for help

Thanks and BR

Rafael

[Chris_Atkinson · Accepted solution]

Which version and JHF is the gateway and do you have mss clamping (sk61221) configured / enabled?

/Edit: Noted R81.20 JHF T53 per diagram.

[LM-Rafael]

Hi,

where can i set the mss clamping parameter? I have enabled under advanced settings (Stateful inspection)

Thanks

Rafael

[Chris_Atkinson]

The SK article referenced provides the relevant artefacts, if the problem persists please contact TAC for assistance.

[the_rock]

Ths sk Chris mentioned definitely has the info.

Best,

Andy

[the_rock]

You can also refer to this one as well.

Andy

https://support.checkpoint.com/results/sk/sk101219

[LM-Rafael]

Ok, When i set the MTU Size on my Windows Client, everything runs fine. But this is not a solution. What can i do now?

[the_rock]

Did you follow sk Chris and I mentioned? If no, please do and if yes and still not working, I would open TAC case and advise them of that.

Andy

[LM-Rafael]

Hi everybody,

the issue is solved, no. Thanks to @Chris_Atkinson and @the_rock .

I have set clamping right now and set the MTU size on Interface.

Thanks and BR

Rafael

[the_rock]

Great!

[PhoneBoy]

When I saw this post come in over the weekend, my initial thought was this was MTU-related.
Glad you sorted that out 🙂

Now, just a small warning about PPPoE interfaces: SecureXL will not accelerate traffic involving PPPoE interfaces (ingress or egress).
This could cause a performance issue down the road if the appliances were not spec'd with this in mind.
Note that this limitation does not apply on Quantum Spark appliances.