Nortel 3050 Command Reference Manual page 398

398 Command Reference
Table 157
SSL VPN Client Menu Options (/cfg/vpn/sslclient) (cont'd.)
Command Syntax and Usage
clampmss
splittun disabled|enabled|enabled_inverse|enabled_inverse
_local
Copyright © 2007 Nortel Networks
.
on: The Net Direct connection is terminated if the session is idle, when
the user exits Net Direct, logs out from the Portal, reloads the Portal or
closes the browser window.
off: The Net Direct connection is only terminated when the user exits
Net Direct, logs out from the Portal, reloads the Portal or closes the
browser window.
The default value is on.
This parameter is used to prevent packet fragmentation for Net Direct
traffic.
•
on: The NVG clamps the MSS (maximum segment size) of a TCP
SYN packet to the MSS of the real interface. This way packet
fragmentation does not occur for TCP traffic, which optimizes the
performance.
•
off: The NVG does not perform MSS clamping. Large encrypted
packets from the virtual interface that do not fit into a single packet
when sent to the server will be subject to fragmentation. This will
result in a slower connection.
The default value is on.
Lets you set the desired split tunnel mode for Net Direct traffic. Split
tunneling allows network traffic to travel either through a tunnel to the
VPN Gateway or directly to the Internet.
•
disabled. Tunnels all network traffic through the Net Direct client to
the VPN Gateway.
•
enabled. Tunnels traffic to specified networks to the VPN
Gateway (see the Split Nets menu on
/sslclient/splitnets Split Nets Configuration" (page
other network traffic goes through the computer's normal network
interface.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
"/cfg/vpn <id>
404)). All