dont-fragment option on ipsec

RouterOS General
1

Does anybody can inform me, where can i get dont-fragment option for ipsec on Mikrotik latest version ?

Thank You

2

Previously it was in /ip ipsec policy. I’m looking where is the problem.

3

Yes this is huge since there are many packets that come in with the “Don’t Fragment” bit set, but then need to go over the IPsec tunnel. Does anyone know how to clear the don’t fragment bit?

4

Yes this is huge since there are many packets that come in with the “Don’t Fragment” bit set, but then need to go over the IPsec tunnel. Does anyone know how to clear the don’t fragment bit?

5

there’s an action in Mangle, called ‘clear DF’