[Openswan Users] Packet has no Non-ESP marker

Paul Wouters paul at xelerance.com
Sat Jan 20 21:50:09 EST 2007

On Sun, 21 Jan 2007, Gerhard Massenbichler wrote:

> Ping with less/equal than 73 bytes work fine. But ping with more then 73
> bytes will fail. The pluto-logs shwo the following line for every ping:
> "pluto[2711]: packet from recvfrom
> has no Non-ESP marker".

It is probably fragmentation. Try changing the mtu.

> I use OpenVPN over IPsec (OpenVPN only cause of ethernetbriding...)

You might want to do l2tp instead. It hands out a local pool IP, so
if "appears" to live locally in the remote network, just like "bridging".


More information about the Users mailing list