OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Cannot send over VPN link.

From: Anthony Metcalf (anthony.metcalfanferny.ath.cx)
Date: Thu Oct 27 2005 - 09:02:51 CDT


On Thu, 27 Oct 2005 09:48:28 -0400
Victor Duchovni <Victor.DuchovniMorganStanley.com> wrote:

> On Thu, Oct 27, 2005 at 02:40:20PM +0100, Anthony Metcalf wrote:
>
> > 1) what the MTU currently is?
>
> man ifconfig
>

Ah yes.

> > 2) What a better value for it would be?
>
> Depends on the type of VPN, substract the size of the VPN
> encapsulation overhead from 1500. Something just over 1400 is
> generally enough, but a precise number depends on the specific
> technology, with IPsec the AH/EH header sizes are specified in RFCs.
>

Putting 1400 in fixes the problem, I can now go about tweaking it.

Thank you again.

Antohny

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDYN4OB7soGsFmzMQRAikYAJ9SaSTLd0MYztHXHEkGD1MoJzkLEgCgk1ym
gbsXWh2VD5XlPov20dGW5TY=
=YBXh
-----END PGP SIGNATURE-----