Lista de correo ecs-isp@2rosenthals.com Mensaje #142
De: "Massimo S." <ecs-isp@2rosenthals.com> Encabezados Completos
Mensaje no decodificado
Asunto: issue with Injoy FW (4.2.2) and a VPN tunnel
Fecha: Wed, 13 Jan 2021 18:52:25 +0100
Para: eCS ISP Mailing List <ecs-isp@2rosenthals.com>

Hi all,

i've an issue with an Injoy FW VPN tunnel:


SITE A
SITE B
SITE C

SITE A communicate correctly with SITE C and of course SITE C to SITE A

SITE B communicate correctly with SITE A and of course SITE A to SITE B

SITE B and SITE C have issues i can ping everything in the 2 lans
from lan of SITE B to lan of SITE C and viceversa

but all protocols have issues
it seems that only very small packets do work between SITE B and SITE C
(and viceversa)

e.g. if a copy from a folder a very small file (e.g. 1KiloByte file) from
SITE C to SITE B it works
if i copy a bigger file it does not work and it seems to wait forever

in the past SITE B to SITE C and vice versa communications worked correctly

both SITE B and SITE C (like also SITE A) use MD5 as auth header
and 3DES as encrpytion, ip compression DEFLATE
preshared secret and client-Xauth

i've of course tried to disable compression, but nothing changes/no improvement

i'm running out of idea
it seems like an MTU issue
the 2 FW machines runs eCS2.2b and have MTU 1500 on the WAN and lan NIC
and that's the right MTU as also suggested by the ISP


any help?

thanks

massimo
Subscribirse en modo directo (FEED) Subscribirse en modo resumen (DIGEST) Subscribirse en modo índice (INDEX) Desubscribirse E-mail al Listmaster