I added:
# show firewall options
mss-clamp {
interface-type tun
mss 1380
}I can't use VTI as mikrotik don't support it. After commit and sudo ipsec restart, I didn't see any difference on my current numbers with both ipsec offload enabled and disabled.
Any other idea?
