hi all. implemented ospf routing between two gre-over-ipsec segments. failover finally works beautifully. having comms issues where connecting to standard web services across gre/ipsec seem to timeout, when connecting to tomcat apps work fine. any clues where i should be looking for the problem? does this sound like an mtu issue? my google-fu is rusty; some of what i'm seeing is contradictory. help is appreciated.

