ip virtual-reassembly secure to remove?

[christian.pinedo]

Hello,

I would like to know if it's save to remove ip virtual-reassembly, "no ip virtual-reassembly", in my router interfaces although I have enabled NAT and ACL enabled on these interfaces. I ask this because I'm receiving a lot of log warnings about reached the maximum number of fragmented packets and I'm more interested in performance than in security.

Thanks in advance!

Christian

[johnlloyd_13]

yes, you can say it's safe to remove it. i've done this a lot of times on our cisco routers.

[christian.pinedo]

Thanks for your response. Just yesterday we suffer an strange network outage, I lost connection to the router, ... and I began to think that it could be related with ip virtual-reassembly.

Thanks!