Massive TTL Decrease ISAKMP-IPSEC VPN

From: "Joel Salminen" <jsalminen@xxxxxxxxxxx>
Date: Thu, 19 Jan 2006 22:27:46 -0600

Anyone else notice a massive TTL deduction when packets pass through a
ISAKMP-IPSEC tunnel. I happen to notice this today monitoring the latency of
hosts through a VPN tunnel. When I ping the inside interface I get a 253 -
252 TTL but just one hop further the TTL is 126. This seems indicative of a
routing loop. Any thoughts?

TIA

.

Follow-Ups:
- Re: Massive TTL Decrease ISAKMP-IPSEC VPN
  - From: Walter Roberson

Prev by Date: Re: PIX 525 and SSL
Next by Date: Re: 802.1q tagging/untagging on Catalyst 2950
Previous by thread: Re: PIX 525 and SSL
Next by thread: Re: Massive TTL Decrease ISAKMP-IPSEC VPN
Index(es):
- Date
- Thread

Relevant Pages

RE: Multiple IP on the same server howo to idenfity
... physical hosts. ... and directly behind a firewall. ... Seemingly also a Windows box. ... some Unix host with a default TTL of 255. ...
(Pen-Test)
RE: Multiple IP on the same server howo to idenfity
... I teach firewall classes, and one of the vendors I deal with has the ... physical hosts. ... Seemingly also a Windows box. ... some Unix host with a default TTL of 255. ...
(Pen-Test)