1

While trying to setup an Ubuntu Linux server as a client to an l2tp/IPSEC server, I notice inconsistencies while trying to send data.

The tunnel/VPN establish the connection / handshake properly and from the client I can ping / ssh to all the machines as expected.

I notice the problem while trying to send data from the client to a remote machine while using scp.

I can copy / get anything without problems:

scp user@vpn:/tmp/test.file

But if I try to send data and the file size to be sent is > the vpn MTU (1280):

scp /tmp/test.file user@vpn:/tmp

I get a "Packet Corrupt" message.

Without success I tried this: ethtool -K eth0 tx off

Using tcpdump I notice that all outgoing packages no matter the size all contain the DF flag, for some reason packages going through the ppp0 interface where not fragmented.

The configuration I am using is:

ipcp-accept-local
ipcp-accept-remote
refuse-eap
require-mschap-v2
noccp
noauth
idle 1800
mtu 1280
mru 1280
defaultroute
usepeerdns
debug
lock
connect-delay 5000

Some of the logs I get:

pppd[26423]: sent [LCP EchoReq id=0x1 magic=0x4501dc87]
pppd[26423]: rcvd [LCP EchoRep id=0x1 magic=0xd6736575]

If I send files in chunks bigger than the MTU:

pppd[12603]: Protocol-Reject for unsupported protocol 0xb8af
pppd[12603]: rcvd [LCP ProtRej id=0x8 ...]

A way around to this is to use rsync and limit the outgoing bandwidth:

rsync -vvv --bwlimit=16 -P -e "ssh -i ssh_key.pem" /tmp.test.file user@vpn:/tmp

Other clients running iOS / OS X from same network have no issues at all, both can send/get data with out any problems, therefore I am not suspecting a problem with the VPN server.

Any ideas or possible patches to fix this issue?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.