hi there,
We know that ipsec traffic has additional overheads such as |ESP Header|Ext IP Header| etc....So in order to adjust tcp mss to avoid truncation, it is command to use with the following cli:
#set sec flow tcp-mss ipsec-vpn mss <xxxx>
Mos of you know that this is for TCP ipsecvpn....
What about UDP when some UDP traffic goes into IPsec tunnel? Is there any cli for adjusting udp packet avoid fragmentation?
Or do you think that udp traffic in ipsecvpn is wrong?