RE: VPN & PPPoE

From: MacFerrin, Ken (Ken_MacFerrin@csgsystems.com)
Date: 01/23/03

  • Next message: Michael Conroy: "Re: blocking IPs for FTP server"
    Date: Thu, 23 Jan 2003 16:57:08 -0600
    From: "MacFerrin, Ken" <Ken_MacFerrin@csgsystems.com>
    To: "Paul Gaskin" <paul@midwesttechnologies.com>
    
    

    Paul,

    Given your dealing with the Linksys I would try their method and check the firmware: http://kb.linksys.com/cgi-bin/om_isapi.dll?clientID=169750&QuestionText=MTU&SelectName1=&advquery=%5bs%5d%5bRank%2c%2050%3a%5bSum%3a%20MTU%5d%5bMerge%3a%20%5bThesaurus%3a%20MTU%5d%5d%5d&infobase=linksysrev.nfo&record={408}&softpage=IKW_ENU_JDocView

    and
    http://kb.linksys.com/cgi-bin/om_isapi.dll?clientID=169750&QuestionText=MTU&SelectName1=&advquery=%5bs%5d%5bRank%2c%2050%3a%5bSum%3a%20MTU%5d%5bMerge%3a%20%5bThesaurus%3a%20MTU%5d%5d%5d&infobase=linksysrev.nfo&record={408}&softpage=IKW_ENU_JHitListgi-bin/om_isapi.dll?clientID=169750&amp;QuestionText=MTU&amp;SelectName1=&amp;advquery=%5bs%5d%5bRank%2c%2050%3a%5bSum%3a%20MTU%5d%5bMerge%3a%20%5bThesaurus%3a%20MTU%5d%5d%5d&amp;infobase=linksysrev.nfo&amp;record={408}&amp;softpage=IKW_E

    Also, here's the recommended values on the windows side:
    http://www.winguides.com/registry/display.php/280/
    -Ken

    -----Original Message-----
    From: Paul Gaskin [mailto:paul@midwesttechnologies.com]
    Sent: Tuesday, January 21, 2003 9:27 AM
    To: 'Keith T. Morgan'
    Cc: 'security-basics@securityfocus.com'
    Subject: RE: VPN & PPPoE

    Is there a sure fire way to come up with a good MTU speed?
    We used one in the Microsoft Knowledge Base. and came up with an MTU of 1366
    and this didn't seem to do the trick.
    Also, We had a concern with setting the MTU really low. How is this going to
    effect the way other files get transferred?
    Will setting the MTU lower effect the speed of the DSL (surfing the web,
    downloading files)?

    Thanks

    Paul

    -----Original Message-----
    From: Keith T. Morgan [mailto:keith.morgan@terradon.com]
    Sent: Tuesday, January 21, 2003 9:15 AM
    To: Paul Gaskin; security-basics@securityfocus.com
    Subject: RE: VPN & PPPoE

    We had to deal with this very issue using IPSEC via Free S/Wan on linux.
    The solution was to kick the interface (pppoe facing) MTU down to the 1280
    range. This was after some experimentation. Play around with the MTU and
    you should be able to get it to work. If you have a sniffer handy on the
    client machine, watch to see how much fragmentation is occuring on the
    interface. Lots of fragmentation seemed to break IPSEC for us.

    -----Original Message-----
    From: Paul Gaskin [mailto:paul@midwesttechnologies.com]
    Sent: Friday, January 17, 2003 4:29 PM
    To: 'security-basics@securityfocus.com'
    Subject: VPN & PPPoE

    I am new to the list and I'm not sure if this even falls into this category
    but I'm getting desperate!

    We have set up a VPN and it seems to work fine everyone can log on and move
    around the network and send and receive email.

    One person though... on a DSL using PPPoE can not send e-mail. we have tried
    everything... has anyone run into this problem?

    the user is on a Windows XP laptop connected to a Linksys wireless router
    (Using PPPoE). and Outlook for E-mail.

    Any help would be greatly appreciated

    Thanks in advance

    Paul



    Relevant Pages

    • RE: VPN & PPPoE
      ... Subject: VPN & PPPoE ... Paul, ... Is there a sure fire way to come up with a good MTU speed? ...
      (Security-Basics)
    • Re: Cant browse network over VPN but CAN ping
      ... You are right that this shouldn't be done at the windows level/ You ... network guy was too lazy to configure the MTU on the tunnel. ... The cisco VPN client and the Deterministic Network Enhancer change ... where you must do a Cisco Client VPN connection over a static tunnel. ...
      (microsoft.public.windows.server.active_directory)
    • Re: tricky dns issue
      ... Thanks for the tip on the ping. ... > you recieve if you have an MTU problem try this ping -f ... > DSL connections use PPPoE) I had a client a few days ago the had the same ... > problem with a lot of sites, It turned out the PPPoE connection was 878 ...
      (microsoft.public.win2000.dns)
    • RE: RE: VPN & PPPoE
      ... Subject: VPN & PPPoE ... MTU discovery sends out the first packet of a connection using the maximum ...
      (Security-Basics)
    • Re: Cant browse network over VPN but CAN ping
      ... You are right that this shouldn't be done at the windows level/ You only ... The cisco VPN client and the Deterministic Network Enhancer change the MTU ...
      (microsoft.public.windows.server.active_directory)

  • Quantcast