[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Question on TCP MSS with repsect to IPSEC
Phil,
>The best you can really hope for is Path MTU support on the sending
>TCP that will respond appropriately to ICMP messages from an IPSEC
>tunnel endpoint that knows what its next hop interface MTU is after
>being adjusted for IPSEC overhead.
>
Doesnt the ICMP message indicate the datagram size (IP Header + data) that
it can send? This being the case, the router or tunnel end point may not
take into account the overhead of IPSEC, correct?
In this scenario, it will be upto the host sending the IPSEC traffic to
adjust the tcp data size.
Thanks,
--Naganand
----------------------------------------------------------------
naganand@ftp.com
Tel #: (508)684-6743 (O)
Follow-Ups: