nanog mailing list archives

Cisco 7600 PFC3B(XL) and IPv6 packets with fragmentation header


From: Mikael Abrahamsson <swmike () swm pp se>
Date: Fri, 30 Sep 2011 07:07:50 +0200 (CEST)


Just thought I'd share some operational info.

PFC3B will by default punt IPv6 packets with fragmentation header to RP and route them there, with the obvious performance penalty this incurs.

Workaround is to change this behaviour, meaning ACLs won't work for packets with fragmentation header anymore:

  #platform ipv6 acl fragment hardware ?
    drop     Drop IPv6 fragments at hardware
    forward  Forward IPv6 fragments at hardware

PFC3C is supposed to not be affected.

A lot of Teredo and 6to4 traffic has fragmentation headers, so this actually is a real problem. We discovered this at our Teredo relay upstream router.

--
Mikael Abrahamsson    email: swmike () swm pp se


Current thread: