[Openswan dev] [Openswan Users] MTU issues with Openswan tunnel

[Paul Wouters]

On Thu, 30 Nov 2006, Jett, Nathan wrote:

> I have several ipsec tunnels to various clients and recently added a new one for a new client.  With this new client's VPN connection, nothing (ie FTP, terminal sevices, etc) seems to work well unless I manually set the MTU value for Openswan to 1400.  However setting the MTU to 1400 screws up my other ipsec tunnels.  Is there a way to set the MTU value for just one tunnel?

Yes, using Advanced Routing. Something like:

ip route change rightsubnet/mask dev xxx mtu 1400

I'd like to see an mtu= option for a per-tunnel setting that does exactly
this. Perhaps something Tuomo would like to work on? :)

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155