I'm wondering, is there any available method or command which is provided to clear the DF bit from the packets which are coming from the LAN interface? I know that I can manually set up a route-map for this, but I'm searching for a different options. I have the following (standard) scenario:
LAN which is connected to a router who creates a GRE (with tunnel protection feature) tunnel to the tail end customer's HQ. The (ip) MTU of the Tunnel is setup to 1400 where the physical ("outside"/"inside") interfaces has a normal ip mtu of 1500. The real problem actually is that when a sender (who is located on lan interface fa0/0) trying to send an IP packet bigger than 1400 bytes with DF bit set (and application that has set this df bit doesn't understand the ICMP notification about fragmentation) the router is dropping the packet because it's too large to enter in Tunnel interface (because of ip mtu 1400 configured on it).
Learn about the rapidly evolving cyberthreat landscape and how both organizations and users can protect themselves as we transition to a forever hybrid world through a conversation with Cisco Talos Security Research Leader for Europe, Middle East, Africa,...
When we said the word “hybrid” in the past, it usually recalled the image of a new variety of plant or maybe an electric car. These days, it applies to the workplace too.
The future of work isn’t “changing” to a h...
Thanks for attending our Ask the Experts (ATXs) session! Here’s the post-session resources for easy reference.
New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology q...
Cisco Secure Endpoint
New packages fit for every organization
Every Cisco Secure Endpoint (formerly AMP for Endpoints) package comes with Cisco SecureX built-in. It’s our cloud-native platform that integrates all your security solutions into one view wit...