As an alternate thought, what OSes and NICs are running on your router, VPN box (and what sort of VPN is that?), and on those boxes where you don't have the problem?
I might guess that if the problem happens with Solaris/OI boxes and does not, for example, happen to Linux and Windows, this might mean that your network gear mangles packets in some way (why not - VPN and NAT and even software VLAN might do strange wonders), and while other OSes might be less picky about packet consistency mismatches, the IP engine in Solaris (or IPFilter) might be more picky and thus fail... Or maybe all of the above and the hardware offload (which of course is not a feature of only bge). From those threads I linked, I incurred that Solaris 10+ should be (have been?) able to detect and disable or collaborate with hardware features, at least on some NICs. It may be that for example e1000g won't show this behavior (being detected by the engine and either degraded to no offload, or worked-around otherwise), and bge's - not so for some reason... Again, here I can only speculate, and there are more knowledgeable experts on the list. Good luck, //Jim Klimov _______________________________________________ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss