> -----Original Message-----
> From: Miguel Martinez [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 17 January 2001 11:40 
> To: 'Ben Nagy'
> Cc: [EMAIL PROTECTED]
> Subject: RE: Problems with Fragment bit Set in big packets!
> 
> 
> 
> Thank you Ben.  I will do some research in this.  Cisco 
> already told me to
> decrease the MTU size in the servers but it involves 10 
> production servers
> and the LAN Administrator is concerned with this change.  

Ok. I'm not surprised. LAN Admins fear the unknown. ;)

> So, 
> we are trying
> to find another solution.  How the a Web Application or the Oracle
> Application can set the DF bit on?

I'll be more blunt with my advice.

1. Find out if the servers are seeing ICMP 3/4 packets when the router fails
to fragment the packets. Run a sniffer on one of the servers, or something.

2. If they are, it's a server problem. The servers should be decreasing the
MTU in response to the error.

3. If they aren't, it's a Cisco problem, unless there's something else
between the servers and the router that's building the VPN tunnel. Harass
the TAC.

> Best regards,
> 
> Miguel

We'd probably better pull this off the list if you have further queries -
it's sort of offtopic.

Cheers,

--
Ben Nagy
Marconi Services
Network Integration Specialist
Mb: +61 414 411 520  PGP Key ID: 0x1A86E304
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to