Re: MTU 1640
Johan Vanderwesthuizen <[email protected]> Fri, 26 Dec 2014 08:11:42 -0600
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail-5807A7B8-6C69-4AA0-A292-9427B50D9666 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Did you try to leave the MTU field blank. That should default to 1492 bytes f= or PPPoE.=20 > On Dec 26, 2014, at 6:31 AM, Jakob Schwienbacher <jakob.schwienbacher@gmai= l.com> wrote: >=20 > Hello Johan, >=20 > Thank you for the response. In fact everything works fine at my site. The p= oint is why do I have MTU size of 1460 instead of 1492 (1492 =3D 1500 defaul= t MTU - 8 Byte PPPoE Header). Furthermore I cannot change in the MTU Size in= the UI of monowall (I can change but it doesn`t take effect). >=20 > A ping gives following result: >=20 > $ ping x.x.x.x -M do -s 1432 > PING x.x.x.x (x.x.x.x) 1432(1460) bytes of data. > 1440 bytes from x.x.x.x: icmp_seq=3D1 ttl=3D59 time=3D46.1 ms > 1440 bytes from x.x.x.x: icmp_seq=3D2 ttl=3D59 time=3D37.9 ms > 1440 bytes from x.x.x.x: icmp_seq=3D3 ttl=3D59 time=3D35.5 ms > 1440 bytes from x.x.x.x: icmp_seq=3D4 ttl=3D59 time=3D37.2 ms >=20 > --- x.x.x.x ping statistics --- > 4 packets transmitted, 4 received, 0% packet loss, time 601ms > rtt min/avg/max/mdev =3D 35.522/39.213/46.193/4.127 ms > $ >=20 > $ ping x.x.x.x -M do -s 1433 > PING x.x.x.x (x.x.x.x) 1433(1461) bytes of data. > ping: local error: Message too long, mtu=3D1460 > ping: local error: Message too long, mtu=3D1460 > ping: local error: Message too long, mtu=3D1460 > ping: local error: Message too long, mtu=3D1460 >=20 > --- x.x.x.x ping statistics --- > 4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 608ms= >=20 > Thank you, >=20 > Jakob >=20 >> On 26 December 2014 at 11:18, Johan Vanderwesthuizen <[email protected]= t> wrote: >> The default MTU, size of 1500-byte MTU, or somewhat smaller is sufficient= because Ethernet frames are limited to a standard maximum of 1500 bytes of p= ayload data. Various IEEE standards use expanded frame sizes to carry additi= onal information. Don't spend to much time with the MTU size at first. Verif= y what are the speed and duplex settings and actually check the results firs= t, before troubleshooting layer 3 and 4 issues. Well, this is my 2c from dea= ling with PPPoE/VPN issues in the past. Another test you can run, once conne= cted, is to change the MTU size from the command line and see at what value d= oes an ping fails when modifying the MTU size/value. You will notice if you m= ake the MTU size to small, the ping will fail/timed out. Troubleshooting MTU= size and fragmented packers are really hard to figure out. Wireshark will a= dd some light to the works, depending "where" you you capture the network tr= affic. (Encrypted vs unencrypted) Hope this info will put you on the right t= rack. >>=20 >> > On Dec 26, 2014, at 3:12 AM, Jakob Schwienbacher track<jakob.schwienbac= [email protected]> wrote: >> > >> > Hi, >> > >> > Im running M0n0wall 1.8.1. Im using PPPoE to connect to my ISP. I had s= ome >> > trouble with MTU size, then i saw my WAN MUT is set to 1460: >> > >> > $ ifconfig >> > ~ >> > ngwan0: flags=3D88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> me= tric 0 >> > mtu 1460 >> > ~ >> > >> > I went to Interfaces > WAN and set the MTU to 1492 (which should be the= >> > Maximum possible on PPPoE links). The MTU setting is visible on the UI a= nd >> > in the config file also after a reboot. >> > >> > >> > $ cat /var/etc/mpd.conf >> > startup: >> > >> > pppoe: >> > create bundle static B1 >> > ~ >> > set link mtu 1492 >> > ~ >> > >> > I disconnected and reconected my WAN interface, I did a reboot of my >> > m0n0wall. But the MTU doesn`t get changed. It remains on 1460. >> > >> > 1. Does anybody see the same issue? >> > >> > 2. Someon know about the value 1460? I couldn't find anything about tha= t. >> > >> > >> > Thanks in advance, >> > >> > Jakob >=20 --Apple-Mail-5807A7B8-6C69-4AA0-A292-9427B50D9666--