Hi,
as per this document when DF bit is set to clear, it allows router to fragment the packets.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dplane/configuration/15-mt/sec-ipsec-data-plane-15-mt-book/sec-df-bit-ovride.html
The clear keyword clears the DF bit in the outer IP header, and the router may fragment the packet to add the IP Security (IPSec) encapsulation.
But later in the same document it says
"In following example, the router is configured to globally clear the setting for the DF bit and copy the DF bit on the interface named Ethernet0. Thus, all interfaces except Ethernet0 will allow the router to send packets larger than the available MTU size; Ethernet0 will allow the router to fragment the packet"
Shouldnt it cause all interfaces to fragment the packet except ethernet 0 ? and ethernet 0 will drop it and send icmp type 3 code 4?
Please shed some light to clear my concepts.
