Enterasys X-Pedition XSR CLI Cli Reference Manual page 592

DF Bit Commands
copy
Defaults
• Disabled
• Copy setting
Mode
Global configuration:
Example
The following example clears the DF bit on all interfaces:
XSR(config)#crypto ipsec df-bit clear
crypto ipsec df-bit (Interface configuration)
This command sets the DF bit for the encapsulating header in VPN Tunnel Mode to a specific
interface.
The clear setting for the DF bit should be used for encapsulating Tunnel Mode IPSec traffic when
you can transmit packets larger than the available MTU size or you do not know the available
MTU size.
Syntax
crypto ipsec df-bit {clear | set | copy}
clear
set
copy
Defaults
• Disabled
• Copy setting
Mode
Interface configuration:
Example
The following example sets the DF bit on F1:
XSR(config-if<F1>)#crypto ipsec df-bit set
14-138 Configuring the VPN
XSR will search the original packet for the outer DF bit setting.
XSR(config)#
Note: This command overrides any existing DF bit global settings.
XSR will clear the DF bit from the outer IP header; the router may
fragment the packet to add IPSec encapsulation.
XSR will set the DF bit in the outer IP header but the router may
fragment the packet if the original packet had the DF bit cleared.
XSR will search the original packet for the outer DF bit setting.
XSR(config-if<xx>)#