IMCP traffic thru FWSM

[npeter77]

Hi,

I have a FWSM running 1.1(3). When I try to ping to any outside host with packet size less than 1427 its working but if the packet size if more than 1427, I get a request timed out for the ping. Is there anyway of making ping with packet size greater than 1427 go thru FWSM.

Regards,

Naveen Peter

[jboyer]

I suspect somewhere between you and your ping destination there is a MTU at 1427 and if you send a ping larger than that it is being fragmented. Most well designed networks will drop ICMP fragements. There is no legitimate reason for an ICMP (particularly echo/echo-reply) to exceed a single packet. You can debug ip packets on the interface to verify it is leaving your firewall.