TCP packet size issue comes to mind.  IPSEC adds to the total.  Causing
packet fragmentation and has been know to uncover other issues that would
not normally be a problem.

Check with the network folks what it should be set to for IPSEC.

Rob

On Mon, Dec 12, 2016, 10:12 PM scott Ford <idfli...@gmail.com> wrote:

> All,
>
> I have a dumb question and apologize in advance for asking it here. We have
> a LDAP sitting on Windows being sent data , that's encrypted with AES128
> encryption . The STC on z/OS sends a 32k packet via a socket write and the
> customer has IPSEC turned on. We saw a hang of the Windows LDAP and we had
> the customer turn off IPSEC, everything worked..
>
> We are scratching our heads, wondering if we have a compatibility issue or
> is IPSEC completely transparent to the application...
>
> Can someone enlighten this old man....
>
>
> Scott
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
-- 

Rob Schramm

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
  • IPSEC scott Ford
    • Re: IPSEC Rob Schramm

Reply via email to