[c-nsp] MTU settings/GRE tunnel

Justin Shore justin at justinshore.com
Tue Sep 25 09:42:14 EDT 2007


I had the same problem on our ME6524s.  The MTU for GRE tunnels was 
hardcoded to 1500 which caused fragmentation, not a good thing in the 
backbone of an ISP.

Justin

Pavel Gulchouck wrote:
> I want that 1500-bytes packets goes through all my ipsec-protected
> gre tunnels without fragmentation. I have big enough MTU at SVI and
> all physical interfaces between tunnel source and tunnel destination
> for it, so I do not want to decrease tcp mss.
> 7200 and 3825 do what I want, but 6500/SPA-IPSEC-2G does not. :-(
> 
> I've just found CSCek57760 - excactly my problem. They tell that it's
> fixed in 12.2(18)SXF10 and 12.2(33)SHX, but I see the same symphtoms
> on 12.2(33)SXH. Some ideas about configuration parameters, or only
> wait for future releases and bugfixes?



More information about the cisco-nsp mailing list