topic Clear Don't Fragment Bit - PIX in Network Security https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707202#M496441 <P>I realize that IOS has the ability to clear the df-bit but does the PIX have that same functionality? I'm currently working with a Netscreen peer who has a much larger pool of 'tweaks' available to him than I am noticing on my PIX 535 with PIX OS 7.2. My issues are with anti-replay and I cannot even disable the anti-replay feature without disabling IKE, and we cannot configure all of our VPN peers manually.</P><P></P><P>My basic question is if clearing the df-bit is possible on the PIX?</P><P></P><P>Thank you all for looking/responding.</P> Fri, 21 Feb 2020 09:21:01 GMT hyattc256 2020-02-21T09:21:01Z Clear Don't Fragment Bit - PIX https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707202#M496441 <P>I realize that IOS has the ability to clear the df-bit but does the PIX have that same functionality? I'm currently working with a Netscreen peer who has a much larger pool of 'tweaks' available to him than I am noticing on my PIX 535 with PIX OS 7.2. My issues are with anti-replay and I cannot even disable the anti-replay feature without disabling IKE, and we cannot configure all of our VPN peers manually.</P><P></P><P>My basic question is if clearing the df-bit is possible on the PIX?</P><P></P><P>Thank you all for looking/responding.</P> Fri, 21 Feb 2020 09:21:01 GMT https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707202#M496441 hyattc256 2020-02-21T09:21:01Z Re: Clear Don't Fragment Bit - PIX https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707203#M496445 <HTML><HEAD></HEAD><BODY><P>Chris,</P><P></P><P>Yes, it is possible to clear the df bit on the Pix for IPSEC Tunnel in version 7.2.</P><P></P><P>The command is:</P><P></P><P>crypto ipsec df-bit </P><P></P><P>Please refer the below URL for details:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/cmd_ref/c5_711.htm#wp2064176" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/cmd_ref/c5_711.htm#wp2064176</A></P><P></P><P>Regards,</P><P>Arul</P><P></P><P>** Please rate all helpful posts **</P></BODY></HTML> Thu, 14 Dec 2006 20:45:27 GMT https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707203#M496445 ajagadee 2006-12-14T20:45:27Z Re: Clear Don't Fragment Bit - PIX https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707204#M496448 <HTML><HEAD></HEAD><BODY><P>Thank you, I guess I've been too focused on troubleshooting and overlooked this. I appreciate the extra brain and set of eyes on this one.</P><P></P><P></P></BODY></HTML> Fri, 15 Dec 2006 11:55:23 GMT https://community.cisco.com/t5/network-security/clear-don-t-fragment-bit-pix/m-p/707204#M496448 hyattc256 2006-12-15T11:55:23Z