[Openswan Users] Problems with multiple VPN tunnels and RoadWarrios

[Paul Wouters]

On Wed, 7 Sep 2005, John A. Sullivan III wrote:

>> - - "ping <internal server>" OK
>> - - "ping -l 10240 <internal server>" FAILED
>>
>> Here's the trace :
>> 13:39:10.827497 192.168.3.2 > 192.168.15.50: icmp: echo request (frag
>> 16076:1376 at 0+)
>> 13:39:11.275483 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 1376+)
>> 13:39:11.730919 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 2752+)
>> 13:39:12.184639 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 4128+)
>> 13:39:12.653270 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 5504+)
>> 13:39:13.100017 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 6880+)
>> 13:39:13.530420 192.168.3.2 > 192.168.15.50: (frag 16076:1376 at 8256+)
>> 13:39:13.743678 192.168.3.2 > 192.168.15.50: (frag 16076:616 at 9632)
>>
>>
>> So it has something to do with the size. The static tunnel works without
>> problems (even large pings). Any other ideas? Please tell me if you need
>> any more info.

If you are running a 2.6.12+ kernel, can you try:

echo "0" > /proc/sys/net/ipv4/ip_no_pmtu_disc

and see what happens?

Paul