What Is MTU?

MTU stands for Maximum Transmission Unit. It represents the maximum size of a network-layer packet that can be carried in a single frame over a particular Layer 2 link, subject to the technology and configuration involved.

A common Ethernet MTU is:

    1500 bytes

This is a common value, not a universal value for every network technology or configuration.

Why Does Packet Size Matter?

Different network links can have different MTU values.

    Host A
       |
       | MTU 1500
       v
    Router 1
       |
       | MTU 1500
       v
    Router 2
       |
       | MTU 1400
       v
    Host B

If a packet is larger than the MTU of a link, the network must handle that packet according to the IP version and packet settings.

Ethernet MTU Example

Suppose a host wants to send a 1500-byte IPv4 packet across an Ethernet interface whose MTU is 1500 bytes.

    Packet Size = 1500 bytes
    Link MTU    = 1500 bytes

    Result:

    Packet fits the configured MTU.

Now consider a packet larger than the supported MTU.

    Packet Size = 2000 bytes
    Link MTU    = 1500 bytes

    Packet is too large for the link.

What Is IP Fragmentation?

Fragmentation occurs when an IP packet is divided into smaller pieces so that the resulting packets can fit within a link's MTU.

    Original Packet
    +-------------------------------+
    |           2000 bytes          |
    +-------------------------------+
                |
                v
          Fragmentation
                |
      +---------+---------+
      |                   |
      v                   v
  Fragment 1          Fragment 2
  smaller             smaller
  packet              packet

The exact fragmentation behavior differs between IPv4 and IPv6.

IPv4 Fragmentation

IPv4 routers can fragment packets in situations where the packet is too large for the outgoing interface and fragmentation is permitted.

The IPv4 header includes fields that allow fragments to be associated with the original packet.

A sender can also set the Don't Fragment (DF) behavior. When fragmentation is prohibited and a packet is too large, a router can discard it and send an ICMP message indicating that the packet is too large for the path.

IPv6 Fragmentation

IPv6 handles fragmentation differently.

Routers do not fragment IPv6 packets in transit. If a packet is too large for the path, the source is expected to discover the path MTU and send appropriately sized packets.

IPv6 hosts can use the Fragment extension header when fragmentation is required by the source.

IPv4 vs IPv6 Fragmentation

What Is Path MTU Discovery?

PMTUD (Path MTU Discovery) is a mechanism used to determine the largest packet size that can travel across a path without requiring fragmentation.

    Host A
       |
    MTU 1500
       |
    Router 1
       |
    MTU 1500
       |
    Router 2
       |
    MTU 1400
       |
    Host B

    Path MTU = 1400
    

The path MTU is constrained by the smallest MTU along the path.

Why PMTUD Is Important

Without proper path MTU handling, a host may send packets that are too large for part of the path.

    Host
     |
     | Large Packet
     v
   Router
     |
     X
 Packet Too Large
     |
     v
ICMP feedback
     |
     v
   Host
     |
     v
Sends smaller packets

For IPv4, ICMP messages can indicate that fragmentation is required but cannot be performed. For IPv6, ICMPv6 Packet Too Big messages are an important part of PMTUD.

What Happens When PMTUD Breaks?

One particularly confusing failure pattern is:

    Small packets
         |
         v
      WORKS

    Large packets
         |
         v
      FAILS

This can make a network appear partially functional.

A user might be able to ping a server but experience problems loading certain websites or transferring larger amounts of data.

What Is MTU Black Hole?

An MTU black hole can occur when packets exceed the path MTU, but the sender does not receive the information needed to reduce the packet size.

    Sender
      |
      | Large Packet
      v
    Router
      |
      X
 Too Large
      |
   ICMP blocked
      |
      X
  No feedback
      |
      v
   Sender

This can result in applications appearing to hang or partially work even though basic connectivity tests succeed.

MTU and VPNs

VPNs and tunnels can introduce additional headers around the original packet.

    Original Packet
    +----------------------+
    |       Data           |
    +----------------------+

             +
      VPN/Tunnel Headers

             |
             v

    Encapsulated Packet
    +------------------------------+
    | VPN | Tunnel | Original Data |
    +------------------------------+

The additional overhead can reduce the amount of space available for the original packet within a fixed-size path MTU.

VPN MTU Example

    Physical Link MTU
    -----------------
         1500 bytes

    VPN overhead
    -----------
         Extra bytes

    Effective payload space
    -----------------------
         Less than 1500

If the VPN configuration and path do not handle packet sizes correctly, fragmentation or packet loss can occur.

Common Symptoms of MTU Problems

• Small pings succeed while larger packets fail.
• Some websites work while others do not.
• VPN connections establish but applications behave incorrectly.
• Large file transfers fail or stall.
• Some application connections appear to hang.
• Problems occur only across certain paths.

These symptoms can have other causes too, so MTU should be treated as one troubleshooting possibility rather than an automatic explanation.

How to Test Packet Size

Many operating systems allow you to send ping packets with a specified payload size and, on IPv4, control fragmentation behavior.

Windows Example

```

C:> ping 8.8.8.8 -f -l 1472 

Here, -f requests Don't Fragment behavior for IPv4, and -l specifies the ICMP payload size.

Remember that the ICMP payload is not the complete IP packet size. IPv4 and ICMP headers add overhead.

Linux Example

```

$ ping -M do -s 1472 8.8.8.8 

Exact command-line options can vary between operating systems and ping implementations.

Calculating IPv4 Packet Size in a Ping Test

For a typical IPv4 packet carrying an ICMP Echo message:

    IP Header
    20 bytes

    ICMP Header
    8 bytes

    Payload
    1472 bytes

    ----------------
    Total
    1500 bytes

This is why a 1472-byte ICMP payload is commonly used when testing a 1500-byte IPv4 MTU, assuming no IP options or additional headers.

Checking MTU on Network Devices

On Cisco IOS, interface information can help you inspect configured interface parameters.

```

Router# show interfaces GigabitEthernet0/0 

Look for the interface MTU in the output.

The exact command and available MTU options depend on the platform and interface type.

Changing MTU on Cisco IOS

On platforms and interfaces that support it, MTU can be configured under the interface.

```

Router(config)# interface GigabitEthernet0/0
Router(config-if)# mtu 1400 

MTU changes should be planned carefully because mismatched values can affect connectivity and application behavior.

MTU Troubleshooting Flow

    Application Problem
            |
            v
    Does basic ping work?
         /     \
       YES      NO
        |        |
        v        v
  Test packet   Check
    sizes       basic
        |      connectivity
        v
   Small works?
         |
        YES
         |
         v
   Large fails?
         |
        YES
         |
         v
   Investigate MTU
         |
  +------+------+
  |             |
  v             v
 PMTUD        VPN/Tunnel
  |             |
  +------+------+
         |
         v
   Check ICMP /
   Firewall /
   Interface MTU

Practical MTU Lab

    PC-A
      |
      |
   Router 1
      |
      | 1500
      |
   Router 2
      |
      | 1400
      |
    PC-B

Lab Objectives

1. Configure the basic network.
2. Verify normal connectivity.
3. Test small ping packets.
4. Test larger ping packets.
5. Change the MTU on one interface in a controlled lab.
6. Observe the effect on packet delivery.
7. Investigate ICMP feedback.
8. Experiment with a tunnel or VPN topology if available.

Quick MTU Quiz

1. What does MTU stand for?

2. What is a common Ethernet MTU?

3. What is fragmentation?

4. Can IPv6 routers fragment packets in transit?

5. What is PMTUD?

6. Why can VPNs cause MTU problems?

Key Takeaways

• MTU defines the maximum packet size supported by a network link.
• 1500 bytes is a common Ethernet MTU.
• Different links can have different MTU values.
• IPv4 and IPv6 handle fragmentation differently.
• IPv6 routers do not fragment packets in transit.
• Path MTU Discovery helps endpoints determine an appropriate packet size.
• Blocked ICMP feedback can contribute to MTU black-hole problems.
• VPN and tunnel overhead can reduce the effective packet size.
• Small-packet success does not always mean large-packet connectivity is working.
• MTU is an important concept when troubleshooting intermittent network problems.