On Tue, Mar 27, 2018 at 8:39 AM, Dan Lenski <dlen...@gmail.com> wrote: > This patch adds the extra headroom for the ESP tunnel (used by both Juniper > and GlobalProtect VPNs) as well, after unexpectedly-large ESP packets were > observed "in the wild": > https://github.com/dlenski/openconnect/issues/96
Although this problem was observed with a GlobalProtect VPN, it seems entirely plausible to me that (some) Juniper VPNs might have a similar problem where the ESP packet size exceeds the expected MTU… Dan _______________________________________________ openconnect-devel mailing list openconnect-devel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/openconnect-devel
