Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


ipsec-vpn (Security Flow)



Hierarchy Level

Release Information

Statement introduced in Junos OS Release 8.5.


Specify the TCP maximum segment size (TCP MSS) for the TCP packets that are about to go into an IPsec VPN tunnel. This value overrides the value specified in the all-tcp-mss statement.


mss value—TCP MSS value for TCP packets entering an IPsec VPN tunnel. Value is optional.

Range: 64 through 65,535 bytes

Default: 1320 bytes

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Related Documentation