Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HE Tunnel GIF Interface MTU at 1280

    Scheduled Pinned Locked Moved 2.3-RC Snapshot Feedback and Issues - ARCHIVED
    20 Posts 6 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      asterix
      last edited by

      Yup.. I saw that. It's on (Default) 1480. Do notice the (Minimum) 1280 is an option as well. I should at least see 1480 on the tunnel interface in pfSense but its picking up the minimum 1280 which is not even set at tunnelbroker.net.

      Seems a bug to me.

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        You can't set it to 1500 (it configures fine that way, but that won't work over the Internet), but 1480 looks to work fine. It's set that way upon applying on interfaces.php, and set after reboot.

        1 Reply Last reply Reply Quote 0
        • A
          asterix
          last edited by

          1480 works. Thanks

          So everytime I install from scratch and configure HE interface I need to set it to 1480? Can't this be automated?

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            1280 is the FreeBSD default for gif interfaces (and actually what he.net's FreeBSD instructions will give you), we use the FreeBSD default where MTU isn't user-defined.

            1 Reply Last reply Reply Quote 0
            • Raul RamosR
              Raul Ramos
              last edited by

              @Asterix:

              1480 works. Thanks

              So everytime I install from scratch and configure HE interface I need to set it to 1480? Can't this be automated?

              On HE in your tunnel settings you have the Advanced tab. There you can change MTU, the default one is 1480. You should be OK if you have not change it.

              pfSense:
              ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
              Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
              NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

              1 Reply Last reply Reply Quote 0
              • A
                asterix
                last edited by

                @mais_um:

                @Asterix:

                1480 works. Thanks

                So everytime I install from scratch and configure HE interface I need to set it to 1480? Can't this be automated?

                On HE in your tunnel settings you have the Advanced tab. There you can change MTU, the default one is 1480. You should be OK if you have not change it.

                Check my third post.

                1 Reply Last reply Reply Quote 0
                • Raul RamosR
                  Raul Ramos
                  last edited by

                  I had read it before but I forgot, this topic is always important to me. Then i don't understand the Automated word, should be 1480 by default on a GIF interface?. I don't know the default on other IPv6 tunnels. I use HE so to me yes.

                  pfSense:
                  ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
                  Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
                  NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

                  1 Reply Last reply Reply Quote 0
                  • A
                    asterix
                    last edited by

                    HE here as well. Yup default 1480 should be good. It's 1280 right now.

                    1 Reply Last reply Reply Quote 0
                    • A
                      asterix
                      last edited by

                      So will the code be updated to default the tunnel MTU to 1480?

                      1 Reply Last reply Reply Quote 0
                      • D
                        David_W
                        last edited by

                        The default of 1280 is because that is the minimum MTU required by the IPv6 RFCs.

                        A default tunnel MTU of 1480 would be problematic, because that incorrectly assumes the parent interface supports an MTU of at least 1500, allowing for the 20 byte overhead of tunnelling. PPPoE has a maximum MTU of 1492 (unless RFC 4638 is in use). I have a cellular modem that has a maximum MTU of 1460. There will be many other examples of parent interfaces that cannot support MTU 1500 operation.

                        1 Reply Last reply Reply Quote 0
                        • A
                          asterix
                          last edited by

                          But the problem I am facing is that manual MTU setting for HE interface is not sticking after a reboot. I set it to 1480 and after a reboot it goes back to 1280. And yes tunnel broker has 1480 set in the advanced tab.

                          1 Reply Last reply Reply Quote 0
                          • Raul RamosR
                            Raul Ramos
                            last edited by

                            What is the MTU of the parent connection(WAN)? Either way you should be able to put 1480. Tray 1452, this is ideal for some pppoe connections. 1452 is the MTU i have in he.

                            pfSense:
                            ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
                            Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
                            NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

                            1 Reply Last reply Reply Quote 0
                            • A
                              asterix
                              last edited by

                              I am on cable.. 1500.

                              I am able to make it stick to even 1500 but once it reboots it goes back to default 1280.

                              1 Reply Last reply Reply Quote 0
                              • H
                                hda
                                last edited by

                                https://forum.pfsense.org/index.php?topic=94692.msg535228#msg535228

                                1 Reply Last reply Reply Quote 0
                                • Raul RamosR
                                  Raul Ramos
                                  last edited by

                                  The tunnel has an overhead of 20 bytes for the IPv4 header meaning the maximum MTU of the tunnel can be is 1480 for a connection with an MTU of 1500.

                                  pfSense:
                                  ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
                                  Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
                                  NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cmb
                                    last edited by

                                    @Asterix:

                                    I am able to make it stick to even 1500 but once it reboots it goes back to default 1280.

                                    My setup had a static IP WAN, I can replicate that with DHCP WAN.

                                    Fixed.
                                    https://redmine.pfsense.org/issues/5842

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      asterix
                                      last edited by

                                      Nice. Caught 2 bugs this week which were rectified.

                                      I should be knighted… lol  ;)

                                      All hail Sir Asterix !!!    ;D ;D

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.