How to change MTU on PANGP Virtual Adapter used by GlobalProtect App

How to change MTU on PANGP Virtual Adapter used by GlobalProtect App

53956
Created On 04/14/20 01:39 AM - Last Modified 02/02/24 06:56 AM


Question


How to change MTU on PANGP Virtual Adapter used by GlobalProtect App?

Environment


Windows OS (GP App)

MacOS (GP App)



Answer


By default, PANGP Virtual Adapter has MTU=1400

1. Windows GP client 5.0.x and older: MTU can be changed by modifying PANGP virtual adapter MTU setting directly as follows:

a. use netsh command to change the MTU size: (<index> is the virtual interface index, use 'netsh interface ipv4 show interfaces' to list all interface indexes and names)
netsh interface ipv4 set interface <index> mtu=1300
netsh interface ipv6 set interface <index> mtu=1300

 * You can add store=persistent if you want to retain the change after reboots.

b. use powershell command to automatically find out virtual interface and set mtu
powershell -Command "Get-WmiObject win32_networkadapter | where-object ServiceName -eq PanGpd | ForEach {netsh interface ipv4 set interface $_.InterfaceIndex mtu=1300; netsh interface ipv6 set interface $_.InterfaceIndex mtu=1300}"


2. Mac GP client: ifconfig can change virtual adapter MTU size:

ifconfig gpd0 mtu 1300
 



Additional Information


Update : Now we can change the MTU value as the GlobalProtect settings
(Starting with GlobalProtect™ app 5.2.4 with Content Release version 8346-6423 or later)

Configurable Maximum Transmission Unit for GlobalProtect Connections
Features Introduced in GlobalProtect App 5.2
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPbZ&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Choose Language