[strongSwan] Tunnel over [slow] GPRS link

Rene Maurer renemaur at gmail.com
Tue May 2 07:39:07 CEST 2017

Hello Alex

Alexander Hill <alex at hill.net.au> wrote:

> It sounds like an issue with that provider's network configuration
> rather than with the bandwidth or latency.

This is my opinion as well.

> Try lowering MTU/MSS with either the
> charon.plugins.kernel-netlink.mss/mtu settings or via iptables.

I have tried to lower MTU. Without success so far.
I may try MSS as well, but as far as I know MSS is only relevant for
TCP not UDP (which is used by IKE).

BTW, should MSS/MTU be lowered at both sides of the tunnel or is it
enough when this is done at the Mobile Modem side?

> https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling#MTUMSS-issues

Thanks for the link.

Kind regrads

More information about the Users mailing list