On Tue, Mar 27, 2018 at 8:39 AM, Dan Lenski <dlenski at gmail.com> wrote: > This patch adds the extra headroom for the ESP tunnel (used by both Juniper > and GlobalProtect VPNs) as well, after unexpectedly-large ESP packets were > observed "in the wild": > https://github.com/dlenski/openconnect/issues/96 Although this problem was observed with a GlobalProtect VPN, it seems entirely plausible to me that (some) Juniper VPNs might have a similar problem where the ESP packet size exceeds the expected MTU? Dan
