cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
497
Views
0
Helpful
0
Replies

why does reassembly of ipsec tunnel packet not work ?

k-baba
Level 1
Level 1

I am trying to confirm reassembly in "scenario 7" desctibed in ,

http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html#anc17

I configured "ip virtual-reassembly in" on peering interface of ipsec tunnel mode, and fragmentation is to be made before encryption. (default) 

When I send 1500 byte IP backet by ping(20byte header and 1480byte data), decryption side receive two packets with each data length 744byte and 736byte, but reassembly does not work.

Is there any necessary config to enable reassembly function for tunnel mode ipsec other than "ip virtual-reassembly in" ?

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: