Hello,

it's my first time OpenBSD problem: I setup a network configuration with IPsec
and a GRE tunnel. There is an IPsec connection between a local loopback
interface (lo1) and a remote loopback interface (dummy0 on a Linux box). The
gre interface uses these loopbacks as tunnel src/dest. Following output shows
OpenBSD config:

[EMAIL PROTECTED]:~# ifconfig -A
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
le1: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:60:b0:fb:a4:f8
        inet6 fe80::260:b0ff:fefb:a4f8%le1 prefixlen 64 scopeid 0x1
        inet 213.xx.xx.xx netmask 0xffffff80 broadcast 213.xx.xx.127
le2: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        address: 00:60:b0:cd:3d:15
        inet 193.xx.xx.xx netmask 0xffffff80 broadcast 193.xx.xx.127
        inet6 fe80::260:b0ff:fecd:3d15%le2 prefixlen 64 scopeid 0x2
pflog0: flags=0<> mtu 33224
pfsync0: flags=0<> mtu 2020
enc0: flags=0<> mtu 1536
lo1: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
        inet 192.168.254.7 netmask 0xffffffff
gre0: flags=9011<UP,POINTOPOINT,LINK0,MULTICAST> mtu 1450
        physical address inet 192.168.254.7 --> 192.168.254.1
        inet 192.168.253.18 --> 192.168.253.17 netmask 0xfffffffc
[EMAIL PROTECTED]:~# uname -a
OpenBSD openbsd.my.domain 3.7 GENERIC#50 i386

My problem is to change MTU of gre tunnel. I tried several values, but
everytimes the same result :-( The tunnel works until less then 1376 bytes have
to be transferred. A MTU of 1376 works between a Cisco router an that Linux box,
so I would think, 1376 bytes should also work for OpenBSD / Linux connection.

[EMAIL PROTECTED]:~# ifconfig gre0 mtu 1376
ifconfig: SIOCSIFMTU: Invalid argument
[EMAIL PROTECTED]:~# ifconfig gre0 mtu 1400
ifconfig: SIOCSIFMTU: Invalid argument
[EMAIL PROTECTED]:~# ifconfig gre0 mtu 1450
ifconfig: SIOCSIFMTU: Invalid argument

Any ideas ? Neither FAQ nor mailing list archives / Google showed a solution.

best regards
Christian Felsing


-------------------------------------
Powered by http://www.taunusstein.net

Reply via email to