[Openswan Users] Re: XFRM_STATE_NOPMTUDISC, was : MTU/DF problem with 2.6

Herbert Xu herbert at gondor.apana.org.au
Wed Feb 15 10:20:54 CET 2006


On Tue, Feb 14, 2006 at 04:33:54PM -0500, Andy wrote:
>
> > It's controlled by /proc/sys/net/ipv4/ip_no_pmtu_disc.
> > 
> But wouldn't that would turn off pmtu for ALL traffic? We're looking for
> a way to selectively disable it for ipsec (esp actually).

It's available in the kernel as a per-state flag so someone can
write up a patch for Openswan and make it a per-connection (or global)
flag.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt


More information about the Users mailing list