----- Original Message ----- 
From: "Shashank Khanvilkar" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, October 04, 2003 1:22 AM
Subject: Recipe for Setting up VPN uising L2tpd


>
> http://mia.ece.uic.edu/~papers/volans/l2tpd.html
>
> Comments appreciated.
> Shank

your mtu/mru settings need to be adjusted

1500 is too big, even for ethernet.

most dsl services limit themselves to 1412, so you need to go (1412 -
l2tp header) as a maximum mtu size. (rp-pppoe does this for sure)

i'd prolly suggest an even number, about 1340 for safety.

i personally lock all tunnels to mtu 1100 and use iptables to lock net
traffic to 1000 bytes.

iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss
1000

this is my experience anyhow.

Thanks
Tim Warnock

ISP Technical Manager
GetOnIt! Nationwide Internet.
1300 88 00 97
timoid (at) getonit.net.au


Reply via email to