> > If your traffic is transiting an IPsec tunnel, please have
> > a look at the following tech bulletin:
> 
> IPSec is not involved in this setup, lab topology is as simple as
> notebook(freebsd) - switch(catalyst 2960) - juniper 6350. 

Hmmm.  Sounds like something isn't padding the Ethernet frame
to the minimum frame-length of 64 bytes, or is ignoring the
VLAN tag when calculating the minimum acceptable frame length.

        MAC header   14
        IP header    20
        ICMP header  12
        ICMP payload 17
        ---------------
        Total        63

Check for runts on the J-6350 router, as well as verify that
frames are arriving.  Also check to see if it still fails with
non-VLAN-tagged interface.  And maybe put a sniffer on the
line to see if the frames are being padded, and by how much.


_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to