From: Ken Bantoft (ken_at_freeswan.ca)
Date: Sat Jan 04 2003 - 01:07:03 CET
-----BEGIN PGP SIGNED MESSAGE-----
18:16:51.847372 xxx.xxx.xxx.xxx > mygate.on.ca: (frag 14113:348_at_1376)
That is bad... fragmenting the isakmp negotiation packets. You'll
probably need to dump the MTU on both side down to around 1300, since you
appear to be fragmenting at 1376bytes. Not just the ipsec0 interface, but
the eth# / ppp# interface
On Sat, 4 Jan 2003, Andrew Longstreet wrote:
> IPSec passthru is enabled on the linksys router.
>
> Also, a dump on eth0 of the FreeSWAN gate reveals messages like
>
> 18:16:51.839471 xxx.xxx.xxx.xxx.isakmp > mygate.on.ca.isakmp: isakmp: phase 1 ? ident[E]: [|id] (frag 14113:1376_at_0+)
> 18:16:51.847372 xxx.xxx.xxx.xxx > mygate.on.ca: (frag 14113:348_at_1376)
>
- --
Ken Bantoft The Unoffical FreeS/WAN Site:
ken_at_freeswan.ca http://www.freeswan.ca
PGP Key: finger ken_at_bantoft.org
"We can factor the number 15 with quantum computers. We
can also factor the number 15 with a dog trained to bark
three times." -- Robert Harley, 5/12/01, Sci.crypt
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
iQCVAwUBPhYlqViWUusaxGxpAQFs1gQAgjXHGbE9VTr2EoZqj8eY+5S7amDaDcUz
uASe7IxpYUv4y+Sx5C4RIJ9jssOmEkTeyGDsYDuxSaRQK0fg6UUN3wSf7/KOVe0c
24gjmn/rUj1YFeWQBNzV4UKhuoYXEEq12v4sAesLo8kwNNicL9KUCsutZTYHeUod
3BOie0jVfiI=
=pJNH
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Sat Jan 04 2003 - 05:21:14 CET