Tunnel IPSec between PIX to PIX

From: Armand D (ciscoworks2001@yahoo.com)
Date: Thu May 15 2003 - 15:50:10 GMT-3

• Next message: BROWNE, KEN (AIT): "Wanted, 3 CCIE's in the Northeast and Texas"
• Previous message: Daniel Free: "Policy Based Routing"
• Next in thread: Jensen, Brian D.: "RE: Tunnel IPSec between PIX to PIX"
• Maybe reply: Jensen, Brian D.: "RE: Tunnel IPSec between PIX to PIX"
• Maybe reply: Todd Veillette: "Re: Tunnel IPSec between PIX to PIX"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi ,

I created a IPsec tunnel between pix-1 and pix-2,
sometimesIi receive these messagges through debug
crypto ipsec.
  
--snip--
IPSEC(ipsec_prepare_encap_request): ERROR: unable to
fragment packet pktsize=1500, eff_mtu = 1444
--snip--

It seems the effective MTU is 56 bytes less than the
set MTU. I get this debug on packets between 1444 and
1500, so I set the MTU at 1556, but it doesn't seem to
help things.
    
Do anyone have any suggestions ? It would be greatly
appriciated.

Best,

Armand

http://mobile.yahoo.com.au - Yahoo! Mobile
- Check & compose your email via SMS on your Telstra or Vodafone mobile.

• Next message: BROWNE, KEN (AIT): "Wanted, 3 CCIE's in the Northeast and Texas"
• Previous message: Daniel Free: "Policy Based Routing"
• Next in thread: Jensen, Brian D.: "RE: Tunnel IPSec between PIX to PIX"
• Maybe reply: Jensen, Brian D.: "RE: Tunnel IPSec between PIX to PIX"
• Maybe reply: Todd Veillette: "Re: Tunnel IPSec between PIX to PIX"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon Jun 02 2003 - 15:13:43 GMT-3