Hello
I’m starting to play with mikrotik. I’m using RB951Ui-2HnD under 6.10 OS.
I setup ipsec tunnel to cisco router (client site office).
It was working on Linksys RV042 v3, but routers interface hangs almost every 15 minutes. So i try too switch to mikrotik.
Tunnel is established, but can’t access any resources on client side. I think this is mtu/mss problem.
On RV042 i have mtu set to 1500 on WAN interface. I know that on client site mss is set to 1398.
I add firewall mangle like this:
add chain=forward action=change-mss new-mss=1398 passthrough=yes tcp-flags=syn protocol=tcp src-address=my subnet dst-address=client subnet tcp-mss=1399-65535
From counters i know that package is using this rule, but on wireshark program i saw that mss is set 1456 for outgoing traffic, but for incoming is 1398.
Can someone know how resolve this problem