[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] VPN comes up but not usable for high traffic


  • Subject: Re: [Openvpn-users] VPN comes up but not usable for high traffic
  • From: Erich Titl <erich.titl@xxxxxxxx>
  • Date: Mon, 05 Mar 2007 16:39:55 +0000

Hi Matthias

Matthias Apitz wrote:
> El día Monday, March 05, 2007 a las 10:33:25AM +0000, Erich Titl escribió:
> 
>> It smells like a firewall issue and not really a OpenVPN issue.
>>
>> - Did you check the packets on the client too?
>> - Have a look at timeouts, fragmentation issues.
>>
>>
>> Erich
>>
> 
> Hi Erich,
> 
> You're right, it is definitely a firewall/fragmentation issue
> and not a problem related to OpenVPN. I've checked the messages
> in the stand-by firewall again and they registered the blocking
> of fragments:
> 
> Mar  2 14:23:07 cazador ipmon[167]: 14:23:06.423701 xl1 @0:93 b 10.0.1.202 -> xxx.xxx.xxx.xxx PR udp len 20 (41) (frag 31761:21@1432) OUT
> 
> I have to expand the ipfilter rules with '... keep frags' and
> will do a test.
> 
> Interesting remains, why only the stand-by firewall is doing
> such a fragmentation...

Is the OS/IPF version identical?

cheers

Erich


______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users