TCP retransmitions - incomming from DMVPN to IPSEC Route Based

NETWORKING SOLUTIONS
1

Hello,

Im having troubles moving traffic from a DMVPN from the mobile WAN interface to a IPSEC tunnel thats using a wire WAN.

some context
Before i had a RUT240 for the DMVPN with a internal connection to another router that manage the IPSEC tunnel, after that we bougth a RUT11X to use for the DMVPN and the IPSEC as a concentrator.

the DMVPN is working for the lan but cant reach what after the IPSEC tunnel.

here a diagram

image
image809×671 8.38 KB

i have created varius zones forwarding to permitr traffic to pass between zones.

image
image1223×368 43.2 KB

i also add rules to permit traffic to pass from interface to interface:

image
image1153×357 30.1 KB

what can be done in this case i found that some was having a similar problem as me if im not mistaken:

TCP [FIN-ACK] packets for HTTPS traffic are dropped - NETWORKING SOLUTIONS - Teltonika Community

i see a lot of retrasmision from traffic:

image
image1498×443 63.2 KB

can any body give me an idea of what to do?

2

just tested puting MTU on the DMVPN configuration to 1400 on the hub and all the remotes nodes dindt work.

rollback the change the DMVPN remote devices reconnected to the hub.

any other thing?

3

alguien mas ha tenido este problema?

4

Changing the MTU on the camaras solved to 1300.