[Openswan Users] Where did routes go with Openswan 2.6.31?

Paul Wouters paul at xelerance.com
Sat Mar 12 18:24:28 EST 2011


On Wed, 9 Mar 2011, Greg Scott wrote:

>      ip route show
> no longer shows a route to the other side.  This is new behavior – is it expected?   Running ipsec auto –status does
> show the path to the other side. 

If you switched from KLIPS to NETKEY, that is expected behaviour.

> Putting in a bunch of debug echo commands in my updown script, I found the error happens when I was messing with the
> route to the other side – which I finally noticed no longer exists.   So I just commented out my updown= line in my conn
> definition for now and all seems to work as expected.   I reduced the MTU to 1400 because I had some tunnels crash
> several years ago when some Windows apps tried to send 1500 byte packets.  The cure was to make the MTU smaller, so then
> Windows would send smaller packets.  Is this no longer an issue?

I never heard of tunnels crashing because of a bad MTU. I would not know which bug number that
could relate to.

Paul


More information about the Users mailing list