some extract from cisco guide:"Verifying Pre-Fragmentation For IPSec VPNsTo verify that this feature is enabled, consult the interface statistics on the encrypting router and the decrypting router. If fragmentation occurs on the encrypting router, an...