I would guess that full ip fragment reassembly is when the fragments are reassembled into the ip packet and the packet is sent out. Vs virtual when the ASA reassembles it for internal processing (NAT, ACL) and then discards the fragment. The names make sense, but I haven't seen a device that actually reassembles packets for the data plane and forwards them on. The only data I have found is on ip virtual fragment reassembly, nothing about when the output says "full". My google-fu failed me here. Does anyone know?
Here's the screenshot of full vs virtual:
No comments:
Post a Comment