After configuring IPSEC, 128T software creates network interface corresponding to the IPSEC configuration.  However the MTU and MSS values for the automatically generated interface after configuring IPSEC Client are not saved

SSR Version:6.1.5
IPsec Client Plugin version:3.4.0-5

The MTU and MSS values for the automatically generated interface after configuring IPSEC Client are not saved.

The following command is used to set the values, but the values are returned to default values after "commit" is performed.

PCLI Config
configure authority router xxx node xxx device-interface xxx override-generated true
configure authority router xxx node xxx device-interface xxx network-interface xxx-intf mtu 1375
configure authority router xxx node xxx device-interface xxx network-interface xxx-intf enforced-mss 1267

*admin# show config candidate flat verbose | grep xxx
config authority router xxx node xxx device-interface xxx network-interface xxx-intf mtu 1375
config authority router xxx node xxx device-interface xxx network-interface xxx-intf enforced-mss 1267

commit

admin# show config running flat verbose | grep xxx
config authority router xxx node xxx device-interface xxx network-interface xxx-intf mtu 1500
config authority router xxx node xxx device-interface xxx network-interface xxx-intf enforced-mss disabled

Use configuration under IPSEC-PROFILE to set the MTU for the route(s) to the remote endpoint.