I'm trying to understand the MTU management when creating IPSec packets.
If a IP packets already has the MTU, the resulting IPSec packet will be too large for the outbound link.
Is there a IPSec fragmentation process to resolve this ? Like sending mutiple framgented IPSec packets, to be remuxed at the reciever.
Actually, I'm in a project which relies on adding some data on the IP packet before IPSec-transforming it. The MTU is thus critical here, because it bounds the amount of data we can add on the packet...
I've also seen that MSS size reduction is an option. How can I specify it on the uphill link ?