Fragmented packets trough ASA55XX

henning.kihle · ‎01-17-2008

Hi anyone!

Have a problem with fragmented packets trough different ASA55xx boxes.

My ISP have tested the infrastucture and packets up to 1500B are delivered to my outside interfaces, but trough the ASA's i can only get packets up to 992B (ICMP) and when i try packets above 1380 i get reply that DF should be set???

traffic to the inside interface is replyed on 1500B packets.

I have no idea why sizxe is decreased so much trough the ASA's but it do influence on the the users experience on my WAN locations.

Sincerely

Henning

srue · ‎01-17-2008

"show run mtu" output?

each interface should be set to 1500

henning.kihle · ‎01-18-2008

Hi.

Thx for your reply.

>>

mtu outside 1462

mtu inside 1500

>>

MTU values are given us by the ISP and usually that works just fine, but this is not the case here.

Sincerely

Henning