On Thursday 30 January 2003 08:55 pm, you wrote:
<snip>
> I thought somewhere along the way I read that I didn't need to worry
> about the "Couldn't increase MTU to 1500" warnings.  Since it works fine
> for non-vpn traffic I didn't worry about it (until now).
<snip>
> Any help would be greatly appreciated, I've setup several machines on
> our vpn with no issues, this one has been a nightmare every step of the
> way...
<snip>

Most PPPoE systems use a MTU of 1492, which would be the proper setup.
PPP is compressed from IP and your adding far more overhead with IPSec
that is encrypted. The combination will cause a very large overhead on any
VPN traffic, I would suggest use of possibly a P2 while using both if there is
much traffic on a VPN. I think several people did some testing on PPPoE 
connections and found that it "ideally" took a p-166 to achieve maximum 
bandwidth potential without the Ipsec overhead. You wouldn't see this load
under a non-pppoe connection running ipsec, which verifies your experience
with your other VPN nodes.

I hope this helps,
-- 
~Lynn Avants
Linux Embedded Firewall Project developer
http://leaf.sourceforge.net


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to