> Thanks Gert,
> With your comments I did a little investigating, and found if I remove the
> virtual-assembly command the application servers now have to handle the
> fragmentation rather than the router.
Virtual-reassembly is not about fragmentation, its quite the opposite:
reassambling the frags to a bigger packet. Your router still does
fragmentation, but it doesn't do reassembly.
That also means that you can no longer match Layer 4 ports in an
ACLÂ when the packet is fragmented, so make sure thats not a problem.
Lukas
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
