Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
VPN OpenSwan&Xl2tp problem with big udp packets
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
klimmrod
n00b
n00b


Joined: 08 Nov 2004
Posts: 21
Location: Belgium, Louvain-La-Neuve

PostPosted: Wed Aug 01, 2007 8:25 pm    Post subject: VPN OpenSwan&Xl2tp problem with big udp packets Reply with quote

Hi all,

I'm having a problem with my vpn server using openswan et xl2tp on a gentoo linux.

All the tcp traffic seems to work fine but my udp packets don't pass correctly inside the vpn. The application tries to send packets of 1500bytes. The problem is the packets are cut but all the payload doesn't pass to the ppp+ interface.

I saw it with iptraf and tcpdump tools.

I have set my LAN interface with a mtu of 1400 and the WAN interface have a mtu of 1500 set by the dhcp of my ethernet modem.

In the options.l2tpd file, the mtu and the mru are set to 1400.

I don't have the possibility to change the protocole used by the application because it's an electronic regulator and a non opensource application.æ

The client of the server is a modem/router/vpn client. But the problem is already in the server because I see the UDP packet truncated when they come from my local network.

Are there options to force the VPN to rebuild the udp packet as they arrived on the other side ?

Did I miss something in the configuration to force the application to use smaller udp packets ?

Thanks for all the help or advice you can give me.

Klimmrod
Back to top
View user's profile Send private message
klimmrod
n00b
n00b


Joined: 08 Nov 2004
Posts: 21
Location: Belgium, Louvain-La-Neuve

PostPosted: Thu Aug 02, 2007 9:18 pm    Post subject: Reply with quote

Maybe I could install an other vpn software which is able to rebuild correctly the packet at the end of the tunnel like it has been sent ?

Any idea ?
Back to top
View user's profile Send private message
dashnu
l33t
l33t


Joined: 21 Jul 2004
Posts: 703
Location: Casco Maine

PostPosted: Mon Aug 06, 2007 2:25 pm    Post subject: Reply with quote

you should try to lower the mtu of the WAN interface maybe both... Check the openswan-lists tons of info on this..
_________________
write quit bang
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum