1.2 RC3, IPSEC, Packet Size

  • I spent the last couple of days trying to figure out why some traffic passes through a pfSense 1.2RC3 to pfSense 1.2RC3 IPSEC connection and some traffic does not.

    I saw that I couldn't ping anything over the VPN connection with ping packet sizes over 1418 bytes.  Both ends are full T1s.  I tried everything I could think of; different encryption types, toggling the clear DF bit setting and PF scrubbing options, and etc.  Any data packet over ~1418 bytes would not be passed through the VPN.

    Eventually, I rebuilt both ends with pfSense 1.0.1 and I can send large pings across now.

    Has anyone else run into this issue?  Is there anything I can do to help the developers look further into this?  I don't have any logs or configs from the 1.2RC3 machines because I've rebuilt them, but I am confident I can recreate the issue in our lab environment.

Log in to reply