Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Rubens Kuhl
>>There is nothing special about *forwarding* fragmented packets - unless >>you have an ACL or anything else that wants to look at Layer 4 info. > > That would be Netflow or some QoS policy attached to the interface, for > instance? > I guess the router should reassembly the fragmented packets befo

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Ɓukasz Bromirski
On 2009-11-11 12:00, Thomas Habets wrote: On Tue, 10 Nov 2009, Gert Doering wrote: No. Routers will never reassemble transit traffic. Never is a strong word. It seems "ip virtual-reassembly" do it. It looks like it at least reassembles them in memory and delays them before forwarding them (as

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Thomas Habets
On Tue, 10 Nov 2009, Gert Doering wrote: No. Routers will never reassemble transit traffic. Never is a strong word. It seems "ip virtual-reassembly" do it. It looks like it at least reassembles them in memory and delays them before forwarding them (as fragments) from the debug and counters.

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-10 Thread Gert Doering
Hi, On Tue, Nov 10, 2009 at 06:20:13PM -0200, Leonardo Gama Souza wrote: > >There is nothing special about *forwarding* fragmented packets - unless > >you have an ACL or anything else that wants to look at Layer 4 info. > > That would be Netflow or some QoS policy attached to the interface, for >

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-10 Thread sthaug
> >There is nothing special about *forwarding* fragmented packets - unless > >you have an ACL or anything else that wants to look at Layer 4 info. > > That would be Netflow or some QoS policy attached to the interface, for > instance? Normal ACL or possible a QoS policy based on an ACL. > I gues

[c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-10 Thread Leonardo Gama Souza
Hi, >There is nothing special about *forwarding* fragmented packets - unless >you have an ACL or anything else that wants to look at Layer 4 info. That would be Netflow or some QoS policy attached to the interface, for instance? I guess the router should reassembly the fragmented packets before a

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-10 Thread Rubens Kuhl
Leonardo, Do you mean the ability to fragment packets when traversing to smaller MTU links, or matching fragmented packets in ACLs (fragment ACL clause) ? On my experience it doesn't support the former, and the later is PFC-supported but not available on every IOS release. Rubens On Tue, Nov

[c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-10 Thread Leonardo Gama Souza
Hi list, I would like to know whether SUP720-3BXL supports IPv4 fragmented packets in hardware or not. If it can be supported in hardware, in which cases would the PFC3 punt the IPv4 fragmented packets to MSFC? Unfortunately I could not find/receive a good reference about it so far. Thank