On Fri, 2012-06-08 at 19:05 +0200, Bernhard Schmidt wrote: > It basically works, but I think you are using the wrong MTU value. I'm > currently in an IPv4-only non-MTU-challenged location. Cisco Anyconnect > client connects with 1418 bytes MTU, openconnect with 1315. I'm not > exactly sure what the difference between X-DTLS-MTU and D-CSTP-MTU is > supposed to be, but the tunnel should be able to transport the larger value. > > TCP_INFO rcv mss 1348, snd mss 1348, adv mss 1448, pmtu 1500 Hm, so we should be sending X-CSTP-MTU: 1335, X-CSTP-Base-MTU: 1500. What is the Cisco client sending? And can you see the debug output from the server, like you sent in your first message? -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6171 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20120608/17b06873/attachment-0001.bin>