Skip to main content
joan1
New Member
March 31, 2026
Question

Forticlient IPSEC VPN and MTU troubles under linux

  • March 31, 2026
  • 1 reply
  • 211 views

I am testing the IPSEC tunnel with the ztna client (unfortunately there is no forticlient vpn under linux that supports IPSEC), and had trouble with https sites, so I want to add some info for other victims.

Somehow my ethernet interface picked a MTU of 1280 instead of the 1500 default for ethernet. This caused that the MTU for the sites behind the VPN was 1170, so I could do a telnet to check that the port was open but couldn't open any site.

 

Forcing the MTU on the ethernet to 1500 fixed the issue and now I can browse all the sites without issue.

1 reply

Jean-Philippe_P
Staff & Editor
Staff & Editor
April 3, 2026

Thanks for sharing the tips joan1!

Jean-Philippe - Fortinet Community Team
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.