1.2 RC3, IPSEC, Packet Size
-
I spent the last couple of days trying to figure out why some traffic passes through a pfSense 1.2RC3 to pfSense 1.2RC3 IPSEC connection and some traffic does not.
I saw that I couldn't ping anything over the VPN connection with ping packet sizes over 1418 bytes. Both ends are full T1s. I tried everything I could think of; different encryption types, toggling the clear DF bit setting and PF scrubbing options, and etc. Any data packet over ~1418 bytes would not be passed through the VPN.
Eventually, I rebuilt both ends with pfSense 1.0.1 and I can send large pings across now.
Has anyone else run into this issue? Is there anything I can do to help the developers look further into this? I don't have any logs or configs from the 1.2RC3 machines because I've rebuilt them, but I am confident I can recreate the issue in our lab environment.