Here is the scenario

I have a system A -> layer2 switch1 -> layer3 switch2 -layer3 switch3 -> router1 -> router2 -> internet ---- remote location

I get the message from router1 which is configured for ipsec towards client, the beauty is, the frame size is 1460 which gives this error and at the same time I have another frame size of 1514 which passes through the same ipsec tunnel… the MTU on the interfaces all the way are 1500..

Hello Meenakshi,

the 1514 byte size packet is fragmented by packet originator device.

the 1460 bytes is sent in a single packet by packet originator device.

During its travel in the network it reaches a device that adds overhead (IPSec likely) and a need to fragment arises.

see

http://www.cisco.com/en/US/tech/tk827/tk369/technologies_white_paper09186a00800d6979.shtml

Hope to help

Giuseppe

Hi

I have attached two file working and not working

look for source 161.228.80.77 and destination 152.144.253.61 in working file

look for source 152.144.175.35 and destination 152.144.253.61 in not working file

i believe no fragmentation is done..