VTI, MSS Clamping and MTU
-
So a little clarification is needed. Typically, the guidance for using IPSec in pfSense is to set the MSS Clamping feature in the Advanced Network settings of the firewall. This only deals with TCP traffic though, and since the VTI uses a virtual adapter, should we rather set the MTU size on the VTI adapter and leave the MSS clamping disabled when we are using IPSec VTI?