Clamp TCP MSS for IPIPv6 Tunnel

RouterOS Beginner Basics
1

Hello,
I’ve setup ipipv6 tunnel (ipv4 over ipv6). I see “Clamp TCP MSS” as an option of the tunnel. Also I see in some guidelines that I should add firewall rule for TCP MSS clamping

/ip firewall mangle
add action=change-mss chain=forward comment="Clamp MSS to PMTU" new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn

Should I use both of this settings or just one? Which one is preferable?

Thank you!

2

Clamp in the tunnel interface is the “automated” way to do it, as long as you can calculate PDMTU (not blocking ICMP messages, aka “ping”). You can do the same with mangle, even do the calculation yourself and fix the TCP MSS to a fixed value.

Regards.