[Openswan Users] Packet has no Non-ESP marker
paul at xelerance.com
Sat Jan 20 21:50:09 EST 2007
On Sun, 21 Jan 2007, Gerhard Massenbichler wrote:
> Ping with less/equal than 73 bytes work fine. But ping with more then 73
> bytes will fail. The pluto-logs shwo the following line for every ping:
> "pluto: packet from 22.214.171.124:4500: recvfrom
> 126.96.36.199:4500 has no Non-ESP marker".
It is probably fragmentation. Try changing the mtu.
> I use OpenVPN over IPsec (OpenVPN only cause of ethernetbriding...)
You might want to do l2tp instead. It hands out a local pool IP, so
if "appears" to live locally in the remote network, just like "bridging".
More information about the Users