Re: MTU 1640

Jakob Schwienbacher <[email protected]> Fri, 26 Dec 2014 13:31:36 +0100
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <CA+8-0Tyj5+j2BV7508B3qn=DswD7b607VjYANxsjFTpHHn-+Og@mail.gmail.com>
--089e01419f4eaf1feb050b1db4ed
Content-Type: text/plain; charset=UTF-8

Hello Johan,

Thank you for the response. In fact everything works fine at my site. The
point is why do I have MTU size of 1460 instead of 1492 (1492 = 1500
default MTU - 8 Byte PPPoE Header). Furthermore I cannot change in the MTU
Size in the UI of monowall (I can change but it doesn`t take effect).

A ping gives following result:

$ ping x.x.x.x -M do -s 1432
PING x.x.x.x (x.x.x.x) 1432(1460) bytes of data.
1440 bytes from x.x.x.x: icmp_seq=1 ttl=59 time=46.1 ms
1440 bytes from x.x.x.x: icmp_seq=2 ttl=59 time=37.9 ms
1440 bytes from x.x.x.x: icmp_seq=3 ttl=59 time=35.5 ms
1440 bytes from x.x.x.x: icmp_seq=4 ttl=59 time=37.2 ms

--- x.x.x.x ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 601ms
rtt min/avg/max/mdev = 35.522/39.213/46.193/4.127 ms
$

$ ping x.x.x.x -M do -s 1433
PING x.x.x.x (x.x.x.x) 1433(1461) bytes of data.
ping: local error: Message too long, mtu=1460
ping: local error: Message too long, mtu=1460
ping: local error: Message too long, mtu=1460
ping: local error: Message too long, mtu=1460

--- x.x.x.x ping statistics ---
4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 608ms

Thank you,

Jakob

On 26 December 2014 at 11:18, Johan Vanderwesthuizen <[email protected]>
wrote:

> The default MTU, size of 1500-byte MTU, or somewhat smaller is sufficient
> because Ethernet frames are limited to a standard maximum of 1500 bytes of
> payload data. Various IEEE standards use expanded frame sizes to carry
> additional information. Don't spend to much time with the MTU size at
> first. Verify what are the speed and duplex settings and actually check the
> results first, before troubleshooting layer 3 and 4 issues. Well, this is
> my 2c from dealing with PPPoE/VPN issues in the past. Another test you can
> run, once connected, is to change the MTU size from the command line and
> see at what value does an ping fails when modifying the MTU size/value. You
> will notice if you make the MTU size to small, the ping will fail/timed
> out. Troubleshooting MTU size and fragmented packers are really hard to
> figure out. Wireshark will add some light to the works, depending "where"
> you you capture the network traffic. (Encrypted vs unencrypted) Hope this
> info will put you on the right track.
>
> > On Dec 26, 2014, at 3:12 AM, Jakob Schwienbacher track<
> [email protected]> wrote:
> >
> > Hi,
> >
> > Im running M0n0wall 1.8.1. Im using PPPoE to connect to my ISP. I had
> some
> > trouble with MTU size, then i saw my WAN MUT is set to 1460:
> >
> > $ ifconfig
> > ~
> > ngwan0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST>
> metric 0
> > mtu 1460
> > ~
> >
> > I went to Interfaces > WAN and set the MTU to 1492 (which should be the
> > Maximum possible on PPPoE links). The MTU setting is visible on the UI
> and
> > in the config file also after a reboot.
> >
> >
> > $ cat /var/etc/mpd.conf
> > startup:
> >
> > pppoe:
> > create bundle static B1
> > ~
> > set link mtu 1492
> > ~
> >
> > I disconnected and reconected my WAN interface, I did a reboot of my
> > m0n0wall. But the MTU doesn`t get changed. It remains on 1460.
> >
> > 1. Does anybody see the same issue?
> >
> > 2. Someon know about the value 1460? I couldn't find anything about that.
> >
> >
> > Thanks in advance,
> >
> > Jakob
>

--089e01419f4eaf1feb050b1db4ed--