[j-nsp] j-series vs. short pings ?
Paul Goyette
pgoyette at juniper.net
Fri Feb 29 12:31:42 EST 2008
> > If your traffic is transiting an IPsec tunnel, please have
> > a look at the following tech bulletin:
>
> IPSec is not involved in this setup, lab topology is as simple as
> notebook(freebsd) - switch(catalyst 2960) - juniper 6350.
Hmmm. Sounds like something isn't padding the Ethernet frame
to the minimum frame-length of 64 bytes, or is ignoring the
VLAN tag when calculating the minimum acceptable frame length.
MAC header 14
IP header 20
ICMP header 12
ICMP payload 17
---------------
Total 63
Check for runts on the J-6350 router, as well as verify that
frames are arriving. Also check to see if it still fails with
non-VLAN-tagged interface. And maybe put a sniffer on the
line to see if the frames are being padded, and by how much.
More information about the juniper-nsp
mailing list