Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VTI, MSS Clamping and MTU

    Scheduled Pinned Locked Moved IPsec
    1 Posts 1 Posters 540 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jlw52761
      last edited by

      So a little clarification is needed. Typically, the guidance for using IPSec in pfSense is to set the MSS Clamping feature in the Advanced Network settings of the firewall. This only deals with TCP traffic though, and since the VTI uses a virtual adapter, should we rather set the MTU size on the VTI adapter and leave the MSS clamping disabled when we are using IPSec VTI?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.