Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Problems connecting to Citrix using NetScreen Remote

0

0

Article ID: KB5391 KB Last Updated: 26 Mar 2019Version: 4.0
Summary:
Problems connecting to Citrix using NetScreen Remote
Symptoms:
NetScreen-Remote to NetScreen Dial Up VPN Citrix/Winframe server on the trust side of the NetScreen NAT device in front of NetScreen Remote PC Http, ICMP, FTP, and DNS work across the VPN tunnel Access to Winframe/Citrix works if no NAT device is in front of NetScreen Remote Access to the Internet is via PPPoE connection using Westell Wirespeed Webshare Proxy Router Cannot connect to Winframe through VPN
Solution:
' Winframe/Citrix servers add enough overhead to the IP header of the packet that could cause fragmentation.'  When this happens, packets get dropped.'  The workaround is to force the Maximum Segment Size (MSS) value for all traffic low enough so that no fragmentation would not occur.'  The recommendation is to set the MSS to 1300 bytes.' This can only be achieved by entering a command in the Command Line Interface (CLI):
set flow all-tcp-mss 1300 [Enter]
save [Enter]
For more information on fragmentation, please refer to Troubleshooting Ethernet/Fast Ethernet and Fragmentation Issues on a NetScreen Device
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search