If mtu could be an issue, then I would suggest that you go throught this document which describes a feature called pre-fragmentation which allows an encrypting router to predetermine the encapsulated packet size from information available in transform sets.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
