Tag Info

New answers tagged

1

It is a MTU issue, this iptable rule(on gateway box) make it work: iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu


0

Openswan or Libreswan to Cisco works fine. I use it as a hub a spoke arrangment, the Cisco is the hub, the linux and Digi routers are the spokes. I use GRE tunnels inside the IPsec, works great. On the Cisco end some tips: You do NOT need an ACL to define interesting traffic on the hub, You need a route map to stop the traffic int eh tunnels form being ...



Top 50 recent answers are included