Re: [Openvpn-devel] openvpn-2.0_beta1: tunnel MTU a bit too large

2004-05-17 Thread Denis Vlasenko
On Sunday 16 May 2004 23:49, James Yonan wrote: > Denis, > > There are two ways of setting the MTU in OpenVPN, one is to use --tun-mtu > which doesn't include any encapsulation overhead, the other is to use > --link-mtu which sets the maximum encrypted UDP datagram size sent between > OpenVPN daemo

Re: [Openvpn-devel] openvpn-2.0_beta1: tunnel MTU a bit too large

2004-05-17 Thread Denis Vlasenko
[snip] > > Anyway, regarding --mssfix: I dont want to work around the problem. > > I want to set correct tunnel MTU. An MTU such that: > > 1) large UDP packets (say, 7000 bytes) sent over tunnel link are cut into > > fragments of such size that, when encapsulated and sent over > > carrier link, do

Re: [Openvpn-devel] openvpn-2.0_beta1: tunnel MTU a bit too large

2004-05-17 Thread James Yonan
Denis Vlasenko said: > On Sunday 16 May 2004 23:49, James Yonan wrote: > > Denis, > > > > There are two ways of setting the MTU in OpenVPN, one is to use --tun-mtu > > which doesn't include any encapsulation overhead, the other is to use > > --link-mtu which sets the maximum encrypted UDP datagra

Re: [Openvpn-devel] OpenVPN 2.0 Multi-client and transparent bridged firewalling

2004-05-17 Thread Mike Auty
Hi, Sorry to take so long to get back to you, I almost missed Beta2 coming out! I think the MAC authentication script would be a great addition, or at least some form of binding between certificate common name and traffic from that remote adaptor. Thanks! Mike 5:)