[Openswan Users] Packet has no Non-ESP marker

[Paul Wouters]

On Sun, 21 Jan 2007, Gerhard Massenbichler wrote:

> Ping with less/equal than 73 bytes work fine. But ping with more then 73
> bytes will fail. The pluto-logs shwo the following line for every ping:
> "pluto[2711]: packet from 84.102.104.147:4500: recvfrom
> 84.102.104.147:4500 has no Non-ESP marker".

It is probably fragmentation. Try changing the mtu.

> I use OpenVPN over IPsec (OpenVPN only cause of ethernetbriding...)

You might want to do l2tp instead. It hands out a local pool IP, so
if "appears" to live locally in the remote network, just like "bridging".

Paul