Hi Claudia,
Thanks for the pointer to that document. Setting the MTU to 1500 didn't
solve my problems, but setting it to 1000 did. What sort of negative
effects will this have, if any?
Thanks,
Chris
----- Original Message -----
From: "Claudia Schmeing" <claudia_at_freeswan.org>
To: <users_at_lists.freeswan.org>
Cc: "Chris Martino" <chris.martino_at_clarityis.com>
Sent: Tuesday, February 12, 2002 7:12 PM
Subject: Re: [Users] Hung Commands over FreeS/WAN tunnel (possible NAT
problem)
> -----BEGIN PGP SIGNED MESSAGE-----
>
> Hi Chris,
>
>
> You write,
> > I've created a IPSEC tunnel using FreeS/WAN on two linux boxes. One of
the
> > boxes is getting it's IP via a NAT type configuration, while the other
is
> > just a standard setup. I was able to get the tunnel established and
data
> > clearly goes over the tunnel, but certian commands which send large
ammounts
> > of data hang. For example, if I do a less on a large file, or even a ps
> > waux I get a few lines displayed, but then it hangs indefinatly. I left
one
> > term open for 2 days and it was still hung.
> >
> > Is this type of problem common when NAT is involved? I have a second
tunnel
> > setup between two non-NAT'd linux boxes and everything works fine (one
of
> > the boxes is involved in the first problem).
>
> Hung connections can be a result of MTU or MSS problems. There's a
> new document in 1.95, doc/background.html, that explains a little about
> these types of problems.
>
> The 1.5 docs have not yet been posted on the Web. But, if you've
> downloaded the latest release you can view a local copy of the document.
>
>
> Cheers,
>
> Claudia
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3ia
> Charset: noconv
>
> iQCVAwUBPGmvcnDIYXPDEHodAQElQQP8DywgzNjmcy738e3MdI0Pw8NgeVNFS+oJ
> Gj1T9inZ6VVuO3SfSN5lQIwGKGhzlLGz6t2NRXdrD3Somu4vjph6qdWUpGL3YcXO
> YIAtZ8viN41R/Kr9VhQng0WywyJljT//wztEF+T45+TTWtWZ0DVNQrzytpQlYng2
> eMI04M5LJ+0=
> =vcpC
> -----END PGP SIGNATURE-----
>
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:48 CEST