- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Since switching to Verizon 5g almost a year ago we have had some issues with working from home using VPN. My wife and I work at the same company, just a different part of organization. We both work from home but she uses PALO ALTO Global Protect and I use Cisco Anyconnect VPN client. Off VPN client our speeds are around 300 Mbps download, and between 20 and 30 Mbps. When I am on Cisco anyconnect my download speeds can range from 60 Mbps to 90 Mbps and my upload will stay around 20 Mbps. However, when my wife is on Global Protect her speeds for upload and download speed are both 5 to 7 Mbps. We work from home, using same 5g internet router same 5 GHz wifi.
Today, I decided to research and try and find anything to try. On my laptop, I ran "netsh interface ipv4 show subinterfaces" thru the command line and located while on VPN the Ethernet adapter using 1300 MTU. Ran the same command on my wife's laptop and found the ethernet for Global Protect uses 1400. I decided to match what the cisco anyconnect uses for MTU and set the MTU on Global protect ethernet to 1300. Can use this command to set it "netsh interface ipv4 set interface "Ethernet 1" mtu=1300" Make sure Ethernet adapter in quotes matches the name of the ethernet adapter that is created when connecting over VPN. Also note when you disconnect and reconnect MTU is set back to what it was originally.
The result of setting the palo alto VPN client MTU to 1300 on ethernet adapters was speeds that were almost 100% identical to what my wife's laptop would have off the VPN. And then we confirmed she could work more efficent and things would load on her laptop much faster. Then disconnected from VPN and reconnected to confirm MTU set back to 1400 would cause slowness.
I want to note I did try and tweak the MTU settings on the 5 GHz wireless network settings and change it from automatic to other MTU settings to troubleshoot and nothing helped the PALO VPN. However, I did notice and improvement setting the MTU to 1428 on the Verizon 5g Cube and the global protect download spreeds just to about 160 MBPs from 80-100 MBPs when set to normal default (1500). But this did not help the PALO VPN, only adjusting the MTU on the ethernet adapter on the windows 10 Laptop made the difference for my wife.
Per Request of Verizon, I am posting this here to cause more testing and possible more ideas on a solution for 5g internet users working from home using VPN.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Based on what I am seeing online, it seems companies are adapting by making it so additional configurations for VPN can be done so people can get different MTU settings based on grouping.
Here is an article I found from PALO ALTO around MTU. It’s a few years old but also identifies they understand some ISP providers 1400 isn’t low enough and actually outlined the method done to decrease the MTU on ethernet adapter to 1300 (https://live.paloaltonetworks.com/t5/globalprotect-articles/troubleshooting-globalprotect-mtu-issues...). They don’t mention that when you disconnect and reconnect, that the MTU is automatically readjusted back to 1400 but do make the claim the preferred method to change it is in the PALO ALTO portal in configuration.
Based on this article, it looks like you can configure MTU requirements by user/group as well.
