Hi,
1. as far as my knowledge goes pure mpls packet should not be fragmented
2. i am unuware of IPSec encap of MPLS, maybe in GRE first?
but once such encap is done there is DF bit set.
3. maybe it will be easier to put additional routers on both endpoints
with interfaces set with an IP MTU, small enough?
cheers!
Vladimir
On Sun, Nov 7, 2010 at 11:02 PM, Doug Clements <[email protected]> wrote:
> Hi,
> From the man page for bridge (4):
>
> If an IP packet is too large for the outgoing interface, the bridge
> will
> perform IP fragmentation. This can happen when bridge members have
> different MTUs or when IP fragments are reassembled by pf. Non-IP
> packets which are too large for the outgoing interface will be dropped.
>
> Is it somehow possible (maybe with different features?) to fragment a
> layer2 frame for reassembly on the other side of a bridge? This would
> be for use with MPLS, so using pf's scrub directive would not be
> applicable. The desired behavior would be to take in 1500 bytes of IP
> payload with an added MPLS label and transport this inside a gif/ipsec
> tunnel over the internet (with a wan-link MTU of 1500).
>
> --Doug
