From: Joe Philipps (joe_at_philipps.us)
Date: Sat Dec 07 2002 - 17:21:52 CET
On Fri, Dec 06, 2002 at 01:46:09PM -0600, Mike Nielsen wrote:
>Doing a ping from a workstaion on B to A yields a 5-20% packet loss, and the
>same if you a ping from a workstation from A to B.
>
>Doing a ping between the external interfaces of the router from A to B yeilds
>a 0-1% packet loss. This was also the case when the setup was ISDN versus
>ISDL.
>
>Near as I can disern there isn't a problem with the internet connection the
>VPN is running on.
>
>If a workstation from B pings the internal interface for router B we get
>0% packet loss
>
>The same thing goes for A, so it doesn't look like any sort of physical
>layer problem on the lan side of either network.
>
>If this was your problem, where would you look next to figure out what is
>going on?
Look at perhaps a fragmentation problem. By default, FSW establishes
a rather large MTU. Since you seem to have deduced that layer 1 and 2
seem sane, the next to examine would be layer 3...IP in this case. To
give you 100 bytes of headroom, try setting the MTU of your ipsecN
interface to 1400, and see if perhaps your packet loss is reduced.
That's just a guess. Good luck.
-- In the jungle/the silicon jungle/the process sleeps tonight. Joe Philipps <joe_at_philippsfamily.org>, http://www.philippsfamily.org/Joe/ public PGP/GPG key 0xFA029353 avail.@ http://pgpkeys.mit.edu ICQ UIN 107106316 \X/
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Sun Dec 08 2002 - 05:20:51 CET