[Openswan Users] ipsec0: MTU of 16260

[Paul Wouters]

On Thu, 1 Jul 2004, Graham Leggett wrote:

> Ah, but I don't want to play around with the MTU.

Then don't :)

> For reasons not known, the MTU as created by openswan on the ipsec 
> device is set to a number which doesn't work for some reason 

How do you know? It is a virtual interface. Do not change that mtu, change
it of the underlying physical device.

> trying to figure out why. The default of 16260 causes downloads to fail 
> (they hang forever). Changing the default to a number less than the 
> underlying interface MTU makes the VPN work.

You should change the physical underlying mtu from 1500 to say 1400.

Paul
-- 

<Reverend> IRC is just multiplayer notepad.