[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: fragmentation



Michael,

>   This fails if there is ICMP hole between the near gateway and the
> originator. This is actually a very common occurance when one has an extruded 
> host/subnet (i.e. the default route for the road warrior is through the
> tunnel) since the "other side" is the entire Internet.

I see I misread this before, you are talking about a different problem
than I was.  What I meant originally is to fix the problem that occurs
between IPsec endpoints, not between the actual sender and receiver.  

-Sami





Follow-Ups: References: