Screen OS

Hi everyone, this is my first post here, and let me say that I've really enjoyed reading the posts so far.

I'm hoping that some of you might have some ideas I can check out.

I have an SSG-140 running 6.3.0r5.0 and I have a dedciated interface (ethernet 0/4) that does nothing but handle iSCSI traffic on its own network, but suddenly my transfer rate has dropped by about 75% and I'm sure it's something I did.

This will give you a great idea of where the problem might be:

flow GRE outbound tcp-mss = 1420
flow GRE inbound tcp-mss = 1420
flow change tcp mss option for all packets = 1350
flow change tcp mss option for outbound vpn packets = 1300
flow change tcp mss option for bi-directional vpn packets = 1396

Every value except "bi-directional vpn" was previously "not set."

I'd prefer a setting that has good peformance, but maybe if I can figure out how to "unset" the values, my performance would go back to what it used to be?

Any thoughts???

Thank you all in advance!

Sam

I have not used any of these parameters myself.  But in general you use "unset" to reverse your previous "set" commands.  So that should roll you back.

Of the parameters you list, I would guess that the set of "all packets" to 1350 would be the most likely culprit.  You your iscsi is direct connected so it can't be the vpn and I assume you are not running gre on the iscsi interface.

Thank you so much for taking the time to read and respond to my post!

I unset those options and performance has doubled!

It's still not where it was, but I'll take it.

I think my next step will be to see if I can do jumbo frames on the interface that it is connected to since the iscsi device is capabale of it.

Thank you once again!!