[c-nsp] Packet Fragmentation

Lukas Tribus luky-37 at hotmail.com
Fri Feb 13 10:05:39 EST 2015


> Thanks Gert,
> With your comments I did a little investigating, and found if I remove the
> virtual-assembly command the application servers now have to handle the
> fragmentation rather than the router.

Virtual-reassembly is not about fragmentation, its quite the opposite:
reassambling the frags to a bigger packet. Your router still does
fragmentation, but it doesn't do reassembly.

That also means that you can no longer match Layer 4 ports in an
ACL when the packet is fragmented, so make sure thats not a problem.


Lukas

 		 	   		  


More information about the cisco-nsp mailing list