The Maximum Transmission Unit (MTU) is the maximum frame size that can be sent between two hosts without fragmentation. The MX uses an MTU size of 1500 bytes on the WAN interface. When a packet is sent from a local host to a host in a remote network, the frame may traverse multiple router hops. If an intermediate router is configured with an MTU size that is too small and the IP header in the datagram has the "Do-not-fragment" bit set, the router informs the sender of an unacceptable maximum packet size with an ICMP "Destination Unreachable-Fragmentation Needed and DF Set" message. The sender will then transmit a smaller frame taking into account the smaller MTU size.
Some routers are configured to drop certain ICMP traffic. If the ICMP error message never makes it back to the sender, it can cause intermittent connectivity issues between the source and destination hosts.
Here are some steps you can take when dealing with an MTU issue.
Note: Please contact Meraki support to modify the MTU size on the WAN link of the MX.
When you are having an issue connecting to a remote host, you can use the ICSI Netalyzr to analyze your Path MTU size. Note that ICSI Netalyzr requires Java to use.
Ping can be used to find an acceptable MTU size. Make sure to take into account the 28 bytes for the IP and ICMP headers by subtracting from the packet size.
ping www.meraki.com -l 1472 -f
This command will ping host www.meraki.com with 1472 bytes of data and set the "Do-not-fragment" bit. This assumes that you are testing a 1500 byte IP datagram minus the 28 bytes of overhead (IP header). If the results of the ping come back "Packet needs to be fragmented but DF set" try lowering the size of the packet until you receive a successful reply from the destination.
ping www.meraki.com -s 1472 -D
This command will ping host www.meraki.com with 1472 bytes of data and set the "Do-not-fragment" bit. This assumes that you are testing a 1500 byte IP datagram minus the 28 bytes of overhead (IP header). If the results of the ping come back "Packet needs to be fragmented but DF set" try lowering the size of the packet until you receive a successful reply from the destination.
For more information on MTU issues, visit the links below
Recommended TCP/IP settings for WAN links with a MTU size of less than 576