34 lines
718 B
Plaintext
34 lines
718 B
Plaintext
# ---
|
|
# Error: AEAD Decrypt error: bad packet ID
|
|
# ---
|
|
|
|
# see also:
|
|
# https://askubuntu.com/questions/1136003/aead-decrypt-error-bad-packet-id-on-openvpn-using-udp
|
|
|
|
# Adjust MTU settings
|
|
#
|
|
# Note:
|
|
# =====
|
|
#
|
|
# With a TUN-style tunnel over UDP using the default TLS options,
|
|
# the per-packet overhead is:
|
|
#
|
|
# - 41 bytes security layer overhead (includes packet tag (1),
|
|
# HMAC-SHA1 signature (20), initialization vector (16),
|
|
sequence number (4))
|
|
#
|
|
# - 28 bytes tunneling overhead (includes IP + UDP header)
|
|
#
|
|
# - Total: 69 bytes per packet
|
|
#
|
|
# => maybe 'mssfix 1431' is sufficient
|
|
#
|
|
tun-mtu 1500
|
|
mssfix 1300
|
|
push "tun-mtu 1500"
|
|
|
|
# ---
|
|
# End: Error: AEAD Decrypt error: bad packet ID
|
|
# ---
|
|
|