Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Look ahead fragmentation (LAF)

Dear all,

I'm testing IPSEC VPN, with the following IOS 12.3.1.

The VPN is working but when I ping with packet size equal or bigger than 1500 byte the packet get dropped with the following error (when I debug crypto ipsec) *Sep 15 00:17:01.374: IPSEC(crypto_engine_ipsec_find_peer): cannot find ipsec flow from flow_id 25546

I think this isuue is related to defragmentation, from the documentation I found that the Look ahead fragmentation is enabled by default.

I also enabled LAF manually but I still get the same error.

Could you please help, no bug is published in CCO.

Regards

A.Amor

  • Other Security Subjects
1 REPLY
New Member

Re: Look ahead fragmentation (LAF)

Thank you for no reply, the problem is solved: this is an IOS bug the problem is solved by using 12.3.3.

Regards

297
Views
0
Helpful
1
Replies
This widget could not be displayed.