Fragmentation | IPSec (2nd Edition)

IPSec does not fragment or reassemble packets. On outbound processing, the transport payload is processed and then passed on to the IP layer for further processing. On inbound processing, the IPSec layer gets a reassembled packet from the IP layer.

However, as IPSec does add IPSec header, it impacts the PMTU length. If IPSec does not participate in PMTU discovery, the IP layer ends up fragmenting a packet as the addition of the IPSec header increases the length of the IP datagram beyond the PMTU.

It is important for IPSec to participate in the PMTU discovery process. This is discussed in greater detail in the chapter on IPSec implementation.

Top

Table of content

IPSec(c) The New Security Standard for the Internet, Intranets, and Virtual Private Networks

IPSec (2nd Edition)

ISBN: 013046189X
EAN: 2147483647

Year: 2004
Pages: 76

Authors: Naganand Doraswamy, Dan Harkins

BUY ON AMAZON

Introducing Microsoft Office InfoPath 2003 (Bpg-Other)

Cisco IP Communications Express: CallManager Express with Cisco Unity Express

Lotus Notes Developers Toolbox: Tips for Rapid and Successful Deployment

Service-Oriented Architecture (SOA): Concepts, Technology, and Design

Pocket Guide to the National Electrical Code(R), 2005 Edition (8th Edition)

After Effects and Photoshop: Animation and Production Effects for DV and Film, Second Edition