You could try using a route map to reset the DF bit on TCP traffic on the PE ingress port facing the CE.Example:!route-map Clear-DF permit 10 match ip address Clear-DF set ip df 0!ip access-list extended clear-DF permit tcp any anyapply the route-map...