Just ping with the DF bit set and increase packet size until it no longer works. With ipsec you can generally get up to 1400 without issue if you want to keep from fragmenting assuming the rest of the ...