Date: Mon, 25 Mar 2002 14:37:51 -0500 From: "jack xiao" <jack_xiao99@hotmail.com> To: <freebsd-security@FreeBSD.ORG> Cc: <tech@openbsd.org> Subject: MTU of gif with IPSec tunnel Message-ID: <OE71jwP4aiKTs3sSIpv00014384@hotmail.com>
next in thread | raw e-mail | index | archive | help
Hi, I set IPSec tunnel with isakmpd under FreeBSD on gif interfaces for multiple destinations. But I find it seems I get worse performance than I set it without gif interfaces, especially when doing FTP. I suspect the issues is on gif MTU. After doing some test on gif MTU, I find we can't lower the MTU less than 1280, which is the minimum value we can reach. If I increase MTU over 1480, it will cause lots of fragmentation during FTP. If I set it between 1280 and 1480, there is not much difference on the total bandwidth. I am wondering the proper MTU value for gif interfcae when setting IPSec tunnel on it. Does anybody have any ideas about this? Thanks. Jack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OE71jwP4aiKTs3sSIpv00014384>