| Where Can I Use This? | What Do I Need? |
|---|
|
|
- VM-Series 10.x or above
- Panorama running PAN-OS 10.1.x or above versions
- Customer Support Portal (CSP) account with one of the
following user roles:
- Superuser, Standard User, Limited User, Threat
Researcher, AutoFocus Trial Role, Group superuser,
Group Standard User, Group Limited User, Group
Threat Researcher, Authorized Support Center (ASC)
User, and ASC Full Service User.
- Superuser access to the VM-Series
firewall
|
By default, the maximum transmission unit
(MTU) size for packets sent on a Layer 3 interface is 1500 bytes.
This size can be manually set to any size from 512 to 1500 bytes
on a per-interface basis. Some configurations require Ethernet frames
with an MTU value greater than 1500 bytes. These are called jumbo
frames.
To use jumbo frames on a firewall you must specifically
enable jumbo frames at the global level. When this is enabled, the
default MTU size for all Layer 3 interfaces is set to a value of
9192 bytes. This default value can then be set to any value in the
range of 512 to 9216 bytes.
After setting a global jumbo frame
size it becomes the default value for all Layer 3 interfaces that
have not explicitly had an MTU value set at the interface configuration
level. This can become a problem if you only want to exchange jumbo
frames on some interfaces. In these situations, you must set the
MTU value at every Layer 3 interface that you do not want to use
the default value.
The following procedure describes how to
enable jumbo frames on a firewall, set the default MTU value for
all Layer 3 interfaces and to then set a different value for a specific
interface.
VM-Series firewall instances deployed with
multiple NUMA nodes, come up in packet MMAP mode when jumbo frame
support is enabled. You must disable jumbo frame support to use
DPDK on VM-Series firewall instance deployed with multiple NUMA
nodes.
