[Openswan Users] Time Out on road-warrior connection

[Paul Wouters]

On Fri, 23 Dec 2005, sasa wrote:

> "Paul Wouters" wrote:
>
> > Try setting the openswan ethX mtu to 1400 and the L2TP mru/mtu to 1200.
> > It is likely packet fragmentation that is causing the problems.
>
> ..for modify openswan ethX mtu to 1400 I must use parameter 'overridemtu' in
> the config setup section of ipsec.conf:
>
> overridemtu=1400

No,m that sets the mtu of the ipsec interface. We need to set the mtu of
the ethX interface.. Just use the command: ifconfig ethX mtu 1400

> ..for l2tp I must modify options.l2tpd:
>
> mru 1200
> mtu 1200


Yes

Paul