Am 15.02.2013 15:28, schrieb David Woodhouse: > On Fri, 2013-02-15 at 15:21 +0100, Michael Helmling wrote: >> when connecting to a VPN server with OpenConnect, the MTU on the created >> tun interface is too high (1418) and TCP connections are broken as soon >> as large packages are transmitted. The gateway operator told me that the >> gateway sends a MTU of 1330 which is also what the Cisco AnyConnect >> client sets on the cscotun0 interface. Manually setting the MTU to 1330 >> on OpenConnect's interface fixes all problems. > Please could you send me a log of OpenConnect (preferably 4.08 or 4.99) > doing the wrong thing, with the '-v' argument? > > Can you make sure you have an up-to-date version of vpnc-script which > honours the $INTERNAL_IP4_MTU environment variable? > Thank you, the issue does not occur with openconnect-4.99, but it does in 4.08. In the debug output of 4.08 the line "DTLS option X-DTLS-MTU : 1418" appears while with 4.99 the correct value 1330 appears there. I guess that's the point. So the issue will be fixed with the next release version? -------------- next part -------------- A non-text attachment was scrubbed... Name: helmling.vcf Type: text/x-vcard Size: 365 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20130218/2357939a/attachment-0001.vcf>