Re: how to lcear DF bit on the router

From: Hansang Bae (hbae@xxxxxxxxxx)
Date: Wed Feb 06 2002 - 21:53:30 GMT-3

• Next message: Ludwig Morales: "Study Aproach"
• Previous message: saeed.tasbihsazan@xxxxxxxxxxxxx: "Re: Is this the Routing and SWITCHING CCIE STUDY GROUP"
• Maybe in reply to: atul pawar: "how to lcear DF bit on the router"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
At 10:41 AM 2/6/2002 +0000, atul pawar wrote:
>I am having problem testing one application across frame relay using
>IPSEC. The router drops the packet as the size is more than 1500. The
>router sees DF bit set on the incoming packets and drops it. I have seen
>following url on Cisco
>http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/
122t2/ftdfipsc.htm
>But for this I need IOS upgrade. Is there any other trick to clear the DF bit?
>Kind Regards,

You have a few choices:

1) Upgrade the IOS (which isn't an option for you
2) Decrease the MTU on the end user PCs
3) Increse the IP MTU on the GRE tunnel (if used)
     There a some consequences so do a little research
4) Allo ICMP Code 3 Type 4 packets through so dynamic path
     mtu-discovery will work.

hsb

• Next message: Ludwig Morales: "Study Aproach"
• Previous message: saeed.tasbihsazan@xxxxxxxxxxxxx: "Re: Is this the Routing and SWITCHING CCIE STUDY GROUP"
• Maybe in reply to: atul pawar: "how to lcear DF bit on the router"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 13:46:14 GMT-3