Switch from Tunnel to VTI mode
-
2.6.0 - After figuring out you have to reduce the MTU size (1472) on the VTI interface, I made the switch to VTI mode with FRR, much more flexibility; however, I have some strange issues with reaching hosts on the other end of the tunnel; I have a couple of hosts that I can't connect via ssh, http or https (pings work fine); the connection starts, but never completes (tcpdump shows packets both directions); I have others that work fine; this behavior started only after switching modes; I further reduced the MTU, but that didn't change the symptoms
-
Changing the MTU to 1460 & MSS to 1432 solved the problem
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.