tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: FAST_IPSEC(?) drops packets?
On 2/25/2011 6:46 PM, Dave Huang wrote:
*10.1.1.66 10.2.1.3 TCP 62564 > rsync [ACK] Seq=84 Ack=6924
Win=65532 Len=1460
*10.1.1.66 10.2.1.3 TCP 62564 > rsync [PSH, ACK] Seq=1544
Ack=6924 Win=65532 Len=1460
I just noticed "Len=1460"... MTU issues, perhaps? I have
"net.inet.ipsec.dfbit=2" in my /etc/sysctl.conf from when I was using
IPSEC; should that be changed for FAST_IPSEC? The inner packets in
question do have DF set.
Home |
Main Index |
Thread Index |
Old Index