Project

General

Profile

Actions

Feature #10222

closed

Tune GRE MTU if GRE over IPsec is used

Added by Viktor Gurov almost 5 years ago. Updated almost 5 years ago.

Status:
Resolved
Priority:
Normal
Category:
Interfaces
Target version:
Start date:
01/30/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

Default GRE MTU value is 1500 (it should be 1476 as maximum for ethernet),
This is impossible in most cases when GRE/IPsec is used

It can be useful to set default MTU value for such cases to 1400
by using such logic:

if ((GRE SOURCE == IPSEC PH1 SOURCE) && (GRE DESTINATION == IPSEC PH2 DESTINATION) &&
    (IPSEC MODE == TRANSPORT) && (IPSEC == ENABLED) && (GRE MTU is not manually entered)) {
            $GRE_MTU = 1400;
}

Actions #1

Updated by Viktor Gurov almost 5 years ago

When you first create GRE/GIF interfaces, pfSense sets the correct MTU for it - 1476/1280
But with any change on the interface edit page, it set MTU to 1500
This PR also fixes this

https://github.com/pfsense/pfsense/pull/4177

Actions #2

Updated by Jim Pingle almost 5 years ago

  • Status changed from New to Pull Request Review
Actions #3

Updated by Renato Botelho almost 5 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • Target version set to 2.5.0
  • % Done changed from 0 to 100

PR has been merged. Thanks!

Actions #4

Updated by Viktor Gurov almost 5 years ago

  • Status changed from Feedback to Resolved

tested on 2.5.0.a.20200219.1144

all three cases (GIF,GRE,GRE/IPsec) works as expected

Actions

Also available in: Atom PDF