Hello,
The packets would be fragmented in the path and there could be delay in reaching the firewall.
All the fragmented packets which are received are stored in FCB. I would suggest you to test the network on what is the MTU along the path.
Regards
Original Message:
Sent: 10-14-2022 10:18
From: Unknown User
Subject: RT_FLOW - FLOW_REASSEMBLE_FAIL
Hello
What is the reason syslog is logging alot of messages like
<14>1 2022-10-14T14:41:01.772+03:00 Srx RT_FLOW - FLOW_REASSEMBLE_FAIL [junos@2636.1.1.1.2.136 source-address="RemoteRouter" destination-address="LocalRouter" assembly-id="20887"]
Remote / Local Router are ip addresses for ipsec tunnel. Also noticing high cpu usage.
Under security flow tcp-mss ipsec-vpn mss i have tryed to set 1350-1450 mtu. No change.