Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,
I have question regarding encryption fragmentation on DMVPN. Doesn't matter before or after is used, just to understand how to configure it. I tried to configure it under my tunnel interface but i got error:
R2(config-if)#crypto ipsec fragmentati...
to sum it, I can do following:
global
R1(config)#crypto ipsec fragmentation before-encryption
R1(config)#int tun0R1(config-if)#crypto ipsec df-bit clear
and one more thing create transform set and put it in tunnel mode
R1(config)#crypto ipsec transfo...
Hi,
thanks for response, i think that i got it now. Until now i thought that "crypto ipsec fragmentation before-encryption" is only applicable to interface and not to enabled it in global config.
R2(config)#crypto ipsec fragmentation before-encryptio...
Yes, i saw that table but what i didn't get from here is, first row/column header feature state. What is feature which is referring to enabled/disabled? Is that i need to configure crypto ipsec df-bit clear and that's it?! If that is all then it is c...