Cisco Cisco Packet Data Gateway (PDG)
sequence numbers from X-N+1 through X. Any packet with the sequence number X-N is discarded. Currently,
N is set at 64, so only 64 packets can be tracked by the decryptor.
N is set at 64, so only 64 packets can be tracked by the decryptor.
At times, however, the 64-packet window size is not sufficient. For example, quality of service (QoS) gives
priority to high-priority packets, which could cause some low-priority packets to be discarded even though
they could be one of the last 64 packets received by the decryptor. This CLI command allows you to expand
the window size, allowing the decryptor to keep track of more than 64 packets.
priority to high-priority packets, which could cause some low-priority packets to be discarded even though
they could be one of the last 64 packets received by the decryptor. This CLI command allows you to expand
the window size, allowing the decryptor to keep track of more than 64 packets.
Examples
The following command specifies an IPSec anti-replay window size of 128 packets.
crypto ipsec replay window-size 128
Command Line Interface Reference, Modes C - D, StarOS Release 19
1109
Crypto IPSec Configuration Mode Commands
replay window-size