AW: [Openvpn-users] Changing the MTU of just one client

["Steverding, Kai" <steverding@xxxxxx>]

Thanks !
It worked :)

Kai

-----Ursprüngliche Nachricht-----
Von: James Yonan [mailto:jim@xxxxxxxxx]
Gesendet: Donnerstag, 2. Juni 2005 21:03
An: Steverding, Kai
Cc: 'openvpn-users@xxxxxxxxxxxxxxxxxxxxx'
Betreff: Re: [Openvpn-users] Changing the MTU of just one client


On Thu, 2 Jun 2005, Steverding, Kai wrote:

> Hi !
> I have an OpenVPN Server working with a lot of clients. Every client works
> fine except for one. I need to change the mtu for that client to get it
> working but don't wan't to change the MTU of the whole VPN. How can i do
> that ? I use the following config on the server:
> 
> proto udp
> dh /etc/ssl/dh1024.pem
> tls-server
> max-clients 1000
> server 172.25.0.0 255.255.255.0
> push "route 172.19.0.9 255.255.255.255 172.25.0.1"
> push "ping-restart 72000"
> client-config-dir ccd
> user vpn
> group vpn
> persist-key
> persist-tun
> ca /etc/ssl/certs/cacert.pem
> cert /etc/ssl/certs/joe-fw.crt
> key /etc/ssl/private/joe-fw.key
> port 6767
> verb 1
> tls-auth /etc/ssl/private/key
> reneg-sec 3600
> 
> The entries in the ccd look like this :
> 
> ifconfig-push 172.25.0.66 172.25.0.1
> 
> 
> The Client Config:
> 
> dev tun1
> remote xxx
> tls-client
> client
> verb 1
> proto udp
> nobind
> cert /etc/ssl/certs/10549.crt
> key /etc/ssl/private/10549.key
> ca /etc/ssl/certs/cacert.pem
> tls-auth /etc/openvpn/key
> reneg-sec 3600

Try adding a lower mssfix value in the client config file.  While mssfix 
defaults to 1450, if you use different values on the client and server, 
the lower value will be used for TCP connections over the tunnel.

James