Application works through PIX VPN - not through Cisco 3030 VPN

[jmagnusson]

in short a very bizarre situation. Some users have issues with a certain part of an application once VPN'ed into the 3030 concentrator, then we point thier VPN 3.6.3 client to our PIX running VPN and the application works. This only happens for a few users. We are wondering if the 3030 does fragmentation differently or handles NAT'ed users differently. A tough one to say the least. Anyone dare help ?

Thanks in advance..

Jim

[afakhan]

hi,

u can try clearing DF bit on the private interface on the VPN3K (under interfaces) to see if thas a large packet issue from headend.

is it tcp or udp app?

Thx

Afaq

[jmagnusson]

It is a udp application. It is just strange that is works for some users all the time and on a rare occasion we have a user that works via the Pix and not the 3030. Any reasoning behind how the PIX handles this differently ? How does the PIX handle the fragmentation by default.

Thx again