VPN tunnel drops fragments

Discussion in 'Cisco' started by profile0104, Nov 20, 2006.

  1. profile0104

    profile0104 Guest


    I'm experiencing a strange problem with a GRE over IPSec tunnel between
    two Cisco routers.

    The configuration is tested and has been working for a long time,
    except for a single application. This client-server application works
    on UDP and this is what happens:

    1) app-client generates a 1800 bytes UDP packet
    2) packet is fragmented 1500 + 300 by the first router met
    3) the two fragmented packets (1500 and 300) hit the VPN tunnel
    interface but they don't make it to the other side of the tunnel. It
    looks as they're silently dropped, app-server never sees them.

    The tunnel works in transport mode and ip mtu is set to 1440 bytes, the
    load on the VPN routers is very very low. The tunnel perfectly
    fragments packets bigger than 1440 but smaller than 1500

    Thank you for any advice
    profile0104, Nov 20, 2006
    1. Advertisements

  2. Martin Bilgrav, Nov 20, 2006
    1. Advertisements

  3. profile0104

    profile0104 Guest

    Thank you Martin, but my routers are two 2691 and I don't think there's
    a similar command for them
    profile0104, Nov 22, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.