[Openswan Users] OpenSWAN NetKey MTU Problem?

[Paul Wouters]

On Tue, 27 Feb 2007, Harald Scharf wrote:

> I have no ipsec0 interface in a netkey setup.
> Does it help to set overridemtu or the mtu of interface eth(WAN)?

No. Instead you can try using ip route:

ip route change 1.2.3.0/24 src leftsourceip via defaultgwip mtu xxx

On our wishlist is to add an mtu= option that does exactly this. Patches
for this are welcome (only against 2.5+ since we use liipsecconf now)

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155