www.speedguide.net
http://www.speedguide.net/Cable_modems/cable_registry_advanced.shtml
http://www.speedguide.net/Cable_modems/cable_reg_win2k.shtml
Show this to the LAN admin it makes it all very clear.
HTH
Ken Claussen
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Miguel Martinez
Sent: Tuesday, January 16, 2001 8:10 PM
To: 'Ben Nagy'
Cc: [EMAIL PROTECTED]
Subject: RE: Problems with Fragment bit Set in big packets!
Thank you Ben. I will do some research in this. Cisco already told me to
decrease the MTU size in the servers but it involves 10 production servers
and the LAN Administrator is concerned with this change. So, we are trying
to find another solution. How the a Web Application or the Oracle
Application can set the DF bit on?
Best regards,
Miguel
> -----Original Message-----
> From: Ben Nagy [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 16, 2001 6:59 PM
> To: '[EMAIL PROTECTED]'
> Cc: [EMAIL PROTECTED]
> Subject: RE: Problems with Fragment bit Set in big packets!
>
>
> MS KB Article: Q120642
>
> Summary - you can turn off PMTU-D altogether, or you can try
> enabling "Black
> Hole" router detection, which tries to make PMTU-D work even when some
> routers aren't returning packet-too-big errors.
>
> If there is nothing blocking ICMP error messages between the
> router and the
> webserver, though, I still don't think this is your problem.
> If it were me
> I'd be doing more testing. *shrug*
>
> Another possibility is that the app isn't using PMTU-D at
> all, and it's just
> setting the DF bit for no good reason and not altering MSS.
> If that's the
> case, try setting the MTU on the interface lower (also on
> that KB article).
>
> Cheers,
>
> --
> Ben Nagy
> Marconi Services
> Network Integration Specialist
> Mb: +61 414 411 520 PGP Key ID: 0x1A86E304
>
> > -----Original Message-----
> > From: Miguel Martinez [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, 17 January 2001 11:07
> > To: 'Ben Nagy'
> > Cc: [EMAIL PROTECTED]
> > Subject: RE: Problems with Fragment bit Set in big packets!
> >
> >
> >
> > Ben,
> >
> > Thank you for your quick answer. The OS is W2Y. Do you know
> > how to disable
> > the P-MTU Discovery in Windows 2000? The routers doesn't
> > have any access
> > list applied to the serials or Ethernet port. Also, it
> > happens to be that
> > we are "the router guys". I will appreciate all your help.
> >
> > Best regards,
> >
> > Miguel
> >
> > > -----Original Message-----
> > > From: Ben Nagy [mailto:[EMAIL PROTECTED]]
> > > Sent: Tuesday, January 16, 2001 6:30 PM
> > > To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
> > > Subject: RE: Problems with Fragment bit Set in big packets!
> > >
> > >
> > > Depending on your OS you may be able to disable "Path MTU
> > > Discovery". That
> > > will get rid of your DF bit.
> > >
> > > However, this problem would only occur if the ICMP error
> > > message generated
> > > by the router didn't make it back to the Webserver - you
> > > could verify this
> > > with a sniffer. If the ICMP error _is_ making it back to the
> > > webserver then
> > > I doubt this is your issue.
> > >
> > > My spider senses are tingling - is this a case of "the router
> > > guys" not
> > > being able to get things working and telling you it's a
> > > problem with your
> > > webserver?
> > >
> > > Cheers,
> > >
> > > --
> > > Ben Nagy
> > > Marconi Services
> > > Network Integration Specialist
> > > Mb: +61 414 411 520 PGP Key ID: 0x1A86E304
> > >
> > > -----Original Message-----
> > > From: Miguel Martinez [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, 17 January 2001 10:50
> > > To: [EMAIL PROTECTED]
> > > Subject: Problems with Fragment bit Set in big packets!
> > >
> > >
> > > Hi!
> > >
> > > I hope someone can help me. We are running a web based
> > > application that
> > > makes queries to an Oracle server in a remote network over a
> > > WAN with a VPN
> > > tunnel made by the routers. The problem is that the web
> > > based application
> > > is sending packets with the "don't fragment" bit on. So,
> > > when the routers
> > > encrypt the packets they can't fragment the big ones and
> > > drops them. I
> > > don't know where this fragment bit came from or who
> > > established it? The web
> > > based application was developed in-house.
> > >
> > > If someone can bring me some clue, I will really appreciate it!
> > > Thanks for your help.
> > >
> > > Miguel Martinez
> > > [EMAIL PROTECTED]
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
