[j-nsp] j-series vs. short pings ?

Paul Goyette pgoyette at juniper.net
Fri Feb 29 12:31:42 EST 2008


> > If your traffic is transiting an IPsec tunnel, please have
> > a look at the following tech bulletin:
> 
> IPSec is not involved in this setup, lab topology is as simple as
> notebook(freebsd) - switch(catalyst 2960) - juniper 6350. 

Hmmm.  Sounds like something isn't padding the Ethernet frame
to the minimum frame-length of 64 bytes, or is ignoring the
VLAN tag when calculating the minimum acceptable frame length.

	MAC header   14
	IP header    20
	ICMP header  12
	ICMP payload 17
	---------------
	Total        63

Check for runts on the J-6350 router, as well as verify that
frames are arriving.  Also check to see if it still fails with
non-VLAN-tagged interface.  And maybe put a sniffer on the
line to see if the frames are being padded, and by how much.




More information about the juniper-nsp mailing list