Crypto Ipsec Df-Bit - Avaya G250 Reference

crypto ipsec df-bit

Use the crypto ipsec df-bit command to set the Don't-Fragment bit to one of the
following modes:
clear — the DF bit of the encapsulated packet is never set, and PMTUD is not
maintained for the IPSec tunnel. Packets traversing an IPSec tunnel are pre-fragmented
according to the MTU of the SA, regardless of their DF bit. In case packets are
fragmented, the DF bit is copied to every fragment of the original packet.
copy — the DF bit of the encapsulated packet is copied from the original packet, and Path
MTU Discovery (PMTUD) is maintained for the IPSec tunnel.
Use the no form of the command to restore the Don't-Fragment bit to the default value: copy.
Syntax
[no] crypto ipsec df-bit {clear | copy}
Parameters
Parameter
clear
copy
User level
read-write
Context
interface
Example
G350-001(if:Serial 5/1)# crypto ipsec df-bit clear
Related commands
crypto ipsec minimal-pmtu,
Description
Clear the Don't-Fragment bit
Copy the Don't-Fragment bit
ip crypto-group
Alphabetical listing of CLI commands
Possible Default
Values Value
Issue 1.1 June 2005 137