From: "Massimo S." <ecs-isp@2rosenthals.com>
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
Reply-To: ml@ecomstation.it
Subject: issue with Injoy FW (4.2.2) and a VPN tunnel
Organization: eComStation dot it
Message-ID: <befe1f74-acae-019f-c824-4490eaa264e6@ecomstation.it>
Date: Wed, 13 Jan 2021 18:52:25 +0100
User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424
 Thunderbird/1.0.8 Mnenhy/0.7.4.0
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15; format=flowed
Content-Language: it-IT
Content-Transfer-Encoding: 7bit

Hi all,

i've an issue with an Injoy FW VPN tunnel:


SITE A
SITE B
SITE C

SITE A communicate correctly with SITE C and of course SITE C to SITE A

SITE B communicate correctly with SITE A and of course SITE A to SITE B

SITE B and SITE C have issues i can ping everything in the 2 lans
from lan of SITE B to lan of SITE C and viceversa

but all protocols have issues
it seems that only very small packets do work between SITE B and SITE C
(and viceversa)

e.g. if a copy from a folder a very small file (e.g. 1KiloByte file) from
SITE C to SITE B it works
if i copy a bigger file it does not work and it seems to wait forever

in the past SITE B to SITE C and vice versa communications worked correctly

both SITE B and SITE C (like also SITE A) use MD5 as auth header
and 3DES as encrpytion, ip compression DEFLATE
preshared secret and client-Xauth

i've of course tried to disable compression, but nothing changes/no improvement

i'm running out of idea
it seems like an MTU issue
the 2 FW machines runs eCS2.2b and have MTU 1500 on the WAN and lan NIC
and that's the right MTU as also suggested by the ISP


any help?

thanks

massimo