Good Afternoon
All,
I am currently
trying to resolve an issue where we are having trouble sending data across a
tunnel running GRE encryption. With this encryption employed the MTU
size allowed is decreased to 1476. When we attempt to send traffic
(email, ftp, etc...) through the tunnel, we are finding that it does not
work.
My sniffer trace
is showing that the frames being sent are setting the DF bit, which I would
expect. I would then expect that if the router is unable to send the
packet, it would drop it and return an ICMP message back to the
source telling it to decrease the packet size and try it again. I am not
seeing any of these messages.
We are running
HSRP on the ethernet interfaces that connect to my LAN. I believe we are
running a 12.0 IOS release, although I am not sure of the actual
version.
Does anyone have
any ideas why this might be happening? I am trying to resolve this issue
while having no CLI access to the routers. I have been informed by the
controlling body that there are no access lists prohibiting ICMP messages from
being sent, and there are no firewall rules in place that would be dropping
the ICMP messages.
Any and all
explanations of possible causes/resolutions would be
appreciated.
Steve D.