> >There is nothing special about *forwarding* fragmented packets - unless > >you have an ACL or anything else that wants to look at Layer 4 info. > > That would be Netflow or some QoS policy attached to the interface, for > instance?
Normal ACL or possible a QoS policy based on an ACL. > I guess the router should reassembly the fragmented packets before > applying any policing on the traffic arriving on the interface... > Am I right? No. Each fragment is matched against the ACL on its own. Steinar Haug, Nethelp consulting, [email protected] _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
