Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-06-09 Thread Kim Kimball
Jeffrey Altman wrote: Kim Kimball wrote: Douglas E. Engert wrote: Kim Kimball wrote: Have you tried setting MTU on the fileserver command line instead? No, and I don't want to. Our problem is with just a few clients

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-29 Thread Kim Kimball
Douglas E. Engert wrote: Kim Kimball wrote: Have you tried setting MTU on the fileserver command line instead? No, and I don't want to. Our problem is with just a few clients using VPNs I don't want to slow everyone else down. Didn't for us, couldn't be measured to any significance.

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-29 Thread Jeffrey Altman
Kim Kimball wrote: Douglas E. Engert wrote: Kim Kimball wrote: Have you tried setting MTU on the fileserver command line instead? No, and I don't want to. Our problem is with just a few clients using VPNs I don't want to slow everyone else down. Didn't for us, couldn't be measured to

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how to fix it.

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Douglas E. Engert
Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how to

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeffrey Altman
Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
In order to enable OpenAFS to operate across releases of the Cisco IPSec VPN client prior than 5.0 We're not running sub 5.0 Cisco VPN software, but I'll give it a shot. Jeffrey Altman wrote: Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows.

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-28 Thread Jeff Blaine
Jeff Blaine wrote: FWIW, this appears to be the same problem I reported in April, but for Windows. https://lists.openafs.org/pipermail/openafs-info/2009-April/031127.html We are still working with our networking+VPN folks to try to determine if it's the same thing or not, as well as how to fix

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-27 Thread Douglas E. Engert
Kim Kimball wrote: Have you tried setting MTU on the fileserver command line instead? No, and I don't want to. Our problem is with just a few clients using VPNs I don't want to slow everyone else down. That's what we've done, for the same reason. It has worked, and we don't have to

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-27 Thread Douglas E. Engert
For anyone interested, I sent in a patch today for this [grand.central.org #124880] AutoReply: Add -rxmaxmtu parameter to afsd to help avoid VPN fragmentation of UDP packets Kim Kimball wrote: Have you tried setting MTU on the fileserver command line instead? That's what we've done, for the

Re: [OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-26 Thread Kim Kimball
Have you tried setting MTU on the fileserver command line instead? That's what we've done, for the same reason. It has worked, and we don't have to fiddle with each client. The negotiation between AFS client and fileserver for MTU size is fileserver wins. Kim Kimball Douglas E. Engert

[OpenAFS] OpenAFS, Cisco VPN and MAC OS and mtu

2009-05-15 Thread Douglas E. Engert
We are having problems with Mac OS 10.4 and 10.5 using Cisco VPN AFS can become unusable. Mac 10.4 is running OpenAFS 1.4.8 for sure. I think the Mac 10.5 is running OpenAFS 1.5.59. Using rxdebug and looking at the natMTU parameter, on most Unix systems this is 1444,(1500 - 56) as expected. On