I foolishly wrote: >... > I suppose I could use the overridemtu option, without actually losing > any capacity, but I don't understand why it is getting it wrong. > ... No, I can't. "Not supported with NETKEY." The man page for "ip" sort of suggests you can set mtu per route, but I can't work out how. Cameron.