09-15-2021 01:28 AM
Hello everyone,
i have a conflict. Despite the use of IPSec Tunnel in Crypto Map mode, the overhead is not calculated.
The IP MTU value for us is 1500.
I execute the command:
"ping -f -l 1472 10.1.240.155"
that is, I have 28 bytes as overhead.
20 bytes "new IP overhead or external IP" + 8 bytes ICMP overhead.
How was IPSec (ESP header, ESP trailer, etc.) calculated here?
I see nothing.
Can someone please explain that?
Thank you