tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: FAST_IPSEC(?) drops packets?



On 2/25/2011 6:46 PM, Dave Huang wrote:
*10.1.1.66 10.2.1.3 TCP 62564 > rsync [ACK] Seq=84 Ack=6924 Win=65532 Len=1460 *10.1.1.66 10.2.1.3 TCP 62564 > rsync [PSH, ACK] Seq=1544 Ack=6924 Win=65532 Len=1460

I just noticed "Len=1460"... MTU issues, perhaps? I have "net.inet.ipsec.dfbit=2" in my /etc/sysctl.conf from when I was using IPSEC; should that be changed for FAST_IPSEC? The inner packets in question do have DF set.

Home | Main Index | Thread Index | Old Index