Enterasys Networks XSR CLI Router User Manual


 
DF Bit Commands
XSR CLI Reference Guide 14-137
10.120.122.22
10.120.122.24
10.120.122.25
10.120.122.26
10.120.122.28
10.120.122.31
10.120.122.32
Inuse addresses:
10.120.122.10
10.120.122.21
10.120.122.23
10.120.122.27
10.120.122.29
10.120.122.30
10.120.122.34
Excluded addresses:
Reserved addresses:
10.120.122.0
10.120.122.4
Parameter Description
DF Bit Commands
crypto ipsec df-bit (Global configuration)
ThiscommandsetstheDFbitfortheencapsulatingheaderinVPNTunnelModetoallinterfaces.
TheclearsettingfortheDFbitshouldbeusedforencapsulatingTunnelModeIPSectrafficwhen
youcantransmitpacketslargerthanthe availableMTUsizeoryoudonotknowtheavailable
MTUsize.
Syntax
crypto ipsec df-bit {clear | set | copy}
Pool NameoftheIPpool.
Subnet Mask oftheIPpool.
Mask IPaddresssubnetworkoftheIPpool.
Free SumofunusedIPaddresseswithinthepool.
Inuse SumofoccupiedIPaddresseswithinthepool.
Excluded SumofIPaddressesbarredfromusewithinthepool.
Reserved SumofIPaddressessetaside
withinthepool,suchastheinitialaddress
192.168.57.0withinthe192.168.57.256range.
clear
XSRwillcleartheDFbitfromtheouterIPheader;theroutermay
fragmentthepackettoaddIPSecencapsulation.
set
XSRwillsettheDFbitintheouterIPheaderbuttheroutermay
fragmentthepacketiftheoriginalpackethadtheDFbitcleared.