Hi,
I have a strange trouble... If I established an IPSec tunnel vs an ASA, it goes up but only works if the packet +/- under 150 bytes ... if packet size exceeded, the ASA don't send it to IPSec client; The size is related to the type of configured tunnels:
| VPNclient setup | ping -f -l xxx |
|---|
| IPSec over TCP | 152 |
| IPSEC over UDP | 123 |
| No Transport Tunnelling | 115 |
debug icmp report alway ping request and reply but with packet sniffing on outside vlan don't see a packet for reply when I try with higher values than those given:
ping 'small':
22 3.748396 x.x.x.x 192.168.y.y ESP ESP (SPI=0x7106d9e3) <- ping request
23 3.748884 192.168.y.y x.x.x.x ESP ESP (SPI=0x05d0db4a) <- ping reply
ping 'big':
27 2.981950 x.x.x.x 192.168.y.y ESP ESP(SPI=0x7106d9e3) <- ping request
missing ping reply!
The problem occurs with any protocol (TCP, UDP, ICMP) and verifying the configuration with another ASA did not find notable differences.
The ASA is an 5505 with fw 8.0(4) and IPSec microcode CNlite-MC-IPSECm-MAIN-2.05.
Thanks,
Arturo.
