North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: MTU path discovery and IPSec

  • From: Steven M. Bellovin
  • Date: Wed Dec 03 11:27:55 2003

In message <[email protected]>, [email protected] writes:
>
>Two questions:
>
>1) I assume MTU path discovery has to been in enabled on each router in the pa
>th in order for it work correctly?!

No -- it only has to be enabled on routers with smaller outbound MTUs 
than inbound.  A router for which all links have a 1500-byte MTU 
doesn't need path MTU discovery; it will never need to fragment 
anything.

		--Steve Bellovin, http://www.research.att.com/~smb