CISCO 1941 Router (IPsec Issue)-MTU Value-1460

[Natarajan Muthu]

Hi ,

We are unable to access Core Application over the IPsec.If we removed the Ipsec from the interface.We can able to access the same.

Service Provider MTU Valu is -1460

Can anyone provide solution on this case.

Thanks

[trfinkenstadt]

Natarajan,

can you try:

crypto ipsec df-bit clear

on your config.  you may have non-fragmentable packets getting dropped.  is your setup standard ipsec or gre/ipsec?  

[Natarajan Muthu]

Hi ,

Said command already tried

Branch End Config

!
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key XXXXXX address X.X.X.X
crypto isakmp keepalive 10 5 periodic
!
crypto ipsec security-association lifetime seconds 2000
!
crypto ipsec transform-set XXXXX esp-aes esp-sha-hmac
mode tunnel
!
!
!
crypto map cmap local-address Loopback0
crypto map cmap 10 ipsec-isakmp
description XXXXXX
set peer X.X.X.X
set transform-set XXXXX
match address 134