IPSec transport mode, mtu, fragmentation...

Victor Sudakov vas at sibptus.ru
Fri Dec 20 16:22:36 UTC 2019


Victor Sudakov wrote:

[dd]

> 
> What's the root of the problem? ESP packets cannot get fragmented or
> what? 

Wireshark has shown that the "Don't Fragment" flag is set on all ESP
(protocol 50) packets. Who does this, why, and how can I switch it off
globally?



-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49 at fidonet http://vas.tomsk.ru/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20191220/5ce9a228/attachment.sig>


More information about the freebsd-net mailing list