diff options
| author | Christian Poessinger <christian@poessinger.com> | 2019-07-15 19:18:28 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2019-07-15 19:18:39 +0200 |
| commit | c48280d6c1f054f89863c1e367ba3e5a2a001527 (patch) | |
| tree | a843b5aa97415470d4aa59e9e256f5e1218f1287 | |
| parent | 872be543365cf685a89db37ffd96ec1c9754febf (diff) | |
| download | vyos-documentation-c48280d6c1f054f89863c1e367ba3e5a2a001527.tar.gz vyos-documentation-c48280d6c1f054f89863c1e367ba3e5a2a001527.zip | |
PPPoE: move MSS to routing
| -rw-r--r-- | docs/interfaces/pppoe.rst | 21 | ||||
| -rw-r--r-- | docs/routing/mss-clamp.rst | 2 |
2 files changed, 3 insertions, 20 deletions
diff --git a/docs/interfaces/pppoe.rst b/docs/interfaces/pppoe.rst index 93e194a3..883a3c5d 100644 --- a/docs/interfaces/pppoe.rst +++ b/docs/interfaces/pppoe.rst @@ -46,25 +46,6 @@ Once you have an Ethernet device connected, i.e. eth0, then you can configure it * The largest MTU size you can use with DSL is 1492 due to PPPoE overhead. If you are switching from a DHCP based ISP like cable then be aware that things like VPN links may need to have their MTU sizes adjusted to work within this limit. * With the ``default-route`` option set to ``auto``, VyOS will only add the Default Gateway you receive from your DSL ISP to the routing table if you have no other WAN connections. If you wish to use a Dual WAN connection, change the ``default-route`` option to ``force``. - -TCP MSS clamping ----------------- - -After creating PPPoE connection, you also need to setup TCP MSS clamping of outgoing connections from your LAN, otherwise you will find that you can ping the Internet but fail to load most of websites. Here is the configuration (assuming eth1 is the LAN port): - -.. code-block:: sh - - set policy route MSS description "TCP MSS clamping for PPPoE" - set policy route MSS rule 5 protocol tcp - set policy route MSS rule 5 tcp flags SYN - set policy route MSS rule 5 set tcp-mss 1452 - set interface ethernet eth0 pppoe 0 policy route MSS - set interface ethernet eth1 policy route MSS - -.. hint:: - The value of tcp-mss is 1452 = 1492 - 20 (IP header) - 20 (TCP header) - - Handling and troubleshooting ---------------------------- @@ -95,4 +76,4 @@ This command shows the same log as without the 'tail' option but only starts wit .. code-block:: sh - show interfaces pppoe 0 log tail
\ No newline at end of file + show interfaces pppoe 0 log tail diff --git a/docs/routing/mss-clamp.rst b/docs/routing/mss-clamp.rst index f61aa956..9409690a 100644 --- a/docs/routing/mss-clamp.rst +++ b/docs/routing/mss-clamp.rst @@ -37,3 +37,5 @@ To achieve the same for IPv6 please use: set firewall options interface pppoe0 adjust-mss6 '1280' set firewall options interface wg02 adjust-mss6 '1280' +.. note:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 + bytes on a 1492 byte MTU. |