Hi, I dont see the freebsd ip stack processing ICMP_UNREACH_NEEDFRAG where protocol is ESP/AH. ( The ipsec4_common_ctlinput is not implemented). If this is right, how is the PMTU discovery done for ipsec traffic or is it that freebsd is not doing that?. Thanks Reji