How to Implement General IPSec Configurations for IPSec Networks
Disabling Prefragmentation for Cisco IPSec VPN SPAs
This section provides the following procedures to disable prefragmentation for Cisco IPSec VPN SPAs:
•
•
This IPSec feature is supported only on the Cisco IPSec VPN SPA.
Note
Disabling Prefragmentation for service-ipsec Interfaces
This task disables prefragmentation for service-ipsec interfaces.
SUMMARY STEPS
1.
2.
3.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/0/CPU0:router# configure
Cisco IOS XR System Security Configuration Guide
SC-124
Disabling Prefragmentation for service-ipsec Interfaces, page SC-124
Disabling Prefragmentation for service-gre Interfaces, page SC-125
configure
crypto ipsec pre-fragmentation disable
end
or
commit
Implementing IPSec Network Security on Cisco IOS XR Software
Purpose
Enters global configuration mode.