• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Switch from Tunnel to VTI mode

Scheduled Pinned Locked Moved IPsec
2 Posts 1 Posters 994 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C
    CyberTiVo
    last edited by CyberTiVo Feb 11, 2023, 8:56 PM Feb 11, 2023, 8:54 PM

    2.6.0 - After figuring out you have to reduce the MTU size (1472) on the VTI interface, I made the switch to VTI mode with FRR, much more flexibility; however, I have some strange issues with reaching hosts on the other end of the tunnel; I have a couple of hosts that I can't connect via ssh, http or https (pings work fine); the connection starts, but never completes (tcpdump shows packets both directions); I have others that work fine; this behavior started only after switching modes; I further reduced the MTU, but that didn't change the symptoms

    1 Reply Last reply Reply Quote 0
    • C
      CyberTiVo
      last edited by Feb 11, 2023, 10:55 PM

      Changing the MTU to 1460 & MSS to 1432 solved the problem

      1 Reply Last reply Reply Quote 0
      1 out of 2
      • First post
        1/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received