How to change MTU on PANGP Virtual Adapter used by GlobalProtect App

How to change MTU on PANGP Virtual Adapter used by GlobalProtect App

13480
Created On 04/14/20 01:39 AM - Last Modified 11/20/20 01:11 AM


Question
How to change MTU on PANGP Virtual Adapter used by GlobalProtect App?

Environment

Windows OS (GP App)

MacOS (GP App)



Answer

By default, PANGP Virtual Adapter has MTU=1400

1. Windows GP client 5.0.x and older: MTU can be changed by modifying PANGP virtual adapter MTU setting directly as follows:

a. use netsh command to change the MTU size: (<index> is the virtual interface index, use 'netsh interface ipv4 show interfaces' to list all interface indexes and names)
netsh interface ipv4 set interface <index> mtu=1300
netsh interface ipv6 set interface <index> mtu=1300


b. use powershell command to automatically find out virtual interface and set mtu
powershell -Command "Get-WmiObject win32_networkadapter | where-object ServiceName -eq PanGpd | ForEach {netsh interface ipv4 set interface $_.InterfaceIndex mtu=1300; netsh interface ipv6 set interface $_.InterfaceIndex mtu=1300}"


2. Mac GP client: ifconfig can change virtual adapter MTU size:

ifconfig gpd0 mtu 1300
 



Additional Information
Update : Now we can change the MTU value as the GlobalProtect settings
(Starting with GlobalProtect™ app 5.2.4 with Content Release version 8346-6423 or later)

Configurable Maximum Transmission Unit for GlobalProtect Connections
Features Introduced in GlobalProtect App 5.2
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPbZCAW&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language