[Openswan Users] gre tunnels and klips

[Jason Sigurdur]

Hi, I implemented the fragicmp=no in my ipsec.conf. Then tried an ftp
transfer. I now get the following error:

Klips_error ipsec_xmit_send: ip_send() failed, err=90


jason

-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Wednesday, December 07, 2005 10:57 AM
To: Jason Sigurdur
Cc: users at openswan.org
Subject: Re: [Openswan Users] gre tunnels and klips

On Wed, 7 Dec 2005, Jason Sigurdur wrote:

> My setup as follows:
> 2 fdc 4 systems with 2 gre tunnels between them, over ipsec transport.
> And Ospf point-to-point configuration
>
> My problem is; previously I was using 26sec. Now after I installed
> Klips, packets going throught the gre tunnel timeout/slow. I also
> noticed that when I send Icmp across the tunnel debugging information
> gets scrolled to the console. The MTU size on the my gre tunnel
> interfaces are the same as the mtu size on the ipsecX interfaces.

This is a known problem and will be fixed in the neext release. A
workaround for you might be to add fragicmp=no.

Paul