Interesting, I never knew about packet fragmentation over IPSec links.
I'll investigate that, thanks!