From: Uyota Oyearone (spycharlies@gmail.com)
Date: Tue Mar 31 2009 - 15:34:44 ART
Hi experts,
Just wondering if any one has come across this issue.
I have a home lab setup with 3 sites. Everything seems to be working ok
including VOIP and all other traffic going thru the GRE IPSec tunnels.
But sometimes my router freaks out with an error message especially when my
domain controllers are replicating
" %IP_VFR-4-FRAG_TABLE_OVERFLOW: FastEthernet0/0: the fragment
table has reached its maximum threshold 16 "
Here is part of my router configs
=*=
interface Tunnel12
description TUNNEL_TO_R2
ip address 192.168.12.1 255.255.255.0
ip mtu 1500
ip tcp adjust-mss 1400
keepalive 10 3
tunnel source 10.100.200.251
tunnel destination 10.100.200.252
!
interface Tunnel13
description TUNNEL_TO_R3
ip address 192.168.13.1 255.255.255.0
ip mtu 1500
ip tcp adjust-mss 1400
keepalive 10 3
tunnel source 10.100.200.251
tunnel destination 10.100.200.250
!
interface FastEthernet0/0
description Connected_to_WAN
ip address 10.100.200.251 255.255.255.0
ip access-group EXTERNAL_SOURCES in
no ip proxy-arp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
crypto map vpn
!
interface FastEthernet0/1
description CONNECTED_TO_LAN
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
=*=
#sh ip virtual-reassembly
FastEthernet0/0:
Virtual Fragment Reassembly (VFR) is ENABLED...
Concurrent reassemblies (max-reassemblies): 16
Fragments per reassembly (max-fragments): 32
Reassembly timeout (timeout): 3 seconds
Drop fragments: OFF
Current reassembly count:0
Current fragment count:0
Total reassembly count:127175
Total reassembly timeout count:0
FastEthernet0/1:
Virtual Fragment Reassembly (VFR) is ENABLED...
Concurrent reassemblies (max-reassemblies): 16
Fragments per reassembly (max-fragments): 32
Reassembly timeout (timeout): 3 seconds
Drop fragments: OFF
Current reassembly count:0
Current fragment count:0
Total reassembly count:0
Total reassembly timeout count:0
=*=
Sugestions Welcomed !
Thanks,
Uyota 0.
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Apr 06 2009 - 06:44:08 ART