> Ultima oara cind am verificat, lista asta avea ca topica folosirea > Linux-ului.
Corect. Dar acolo este explicata clar problema: cauzele si posibile solutii care nu tin neaparat de cisco. Chiar daca nu ai vre-un router cisco, e util de citit documentul. > Acum revenind la problema. Nu exista alta solutie decit cea care ti-am > zis-o. > Daca tu stii alta solutie decit a manglui MSS-ul pt conexiunile TCP, te > rog sa o expui.Nu ma refer la nu-stiu-ce-echipamente care in fond tot > asta fac. Printre solutiile realiste: 1.Use a proxy-server (or, even better, a Web cache engine) between R2 and the Gateway router, and let the proxy-server request all the Internet pages. 2. If the GRE tunnel runs over links that can have an MTU greater than 1500 bytes plus the tunnel header, then another solution is to increase the MTU to 1524 (1500 plus 24 for the GRE overhead) on all interfaces and links between the GRE endpoint routers. 3. (Use policy routing to) clear and set the DF bit in the data IP packet. Cred ca e posibil si in linux - nu am studiat varianta asta. 4.Change the TCP MSS option value on SYN packets that traverse through the router ... - posibila in linux cu iptables. 5.A final option is to increase the IP MTU on the tunnel interface to 1500. However, increasing the tunnel IP MTU causes the tunnel packets to be fragmented because the DF bit of the original packet is not copied to the tunnel packet header. In this scenario, the router on the other end of the GRE tunnel must reassemble the GRE tunnel packet before it can remove the GRE header and forward the inner packet. IP packet reassembly is done in process-switch mode and uses memory. Therefore, this option can significantly reduce the packet throughput through the GRE tunnel. > In mod normal nu ar trebui sa existe "braindead administrators" care sa > blocheze pachetele ICMP Frag. Needed. Atunci totul ar trebui sa mearga > (TCP, UDP,...) fara nici o minarie. Sunt perfect de acord ! :) Emil --- Pentru dezabonare, trimiteti mail la [EMAIL PROTECTED] cu subiectul 'unsubscribe rlug'. REGULI, arhive si alte informatii: http://www.lug.ro/mlist/
