[Openswan Users] gre tunnels and klips

[Paul Wouters]

On Wed, 7 Dec 2005, Jason Sigurdur wrote:

> My setup as follows:
> 2 fdc 4 systems with 2 gre tunnels between them, over ipsec transport.
> And Ospf point-to-point configuration
>
> My problem is; previously I was using 26sec. Now after I installed
> Klips, packets going throught the gre tunnel timeout/slow. I also
> noticed that when I send Icmp across the tunnel debugging information
> gets scrolled to the console. The MTU size on the my gre tunnel
> interfaces are the same as the mtu size on the ipsecX interfaces.

This is a known problem and will be fixed in the neext release. A
workaround for you might be to add fragicmp=no.

Paul