Protection mechanisms MUST be enabled on routers and layer 3 switches in order to fend off IPv4 and IPv6 fragmentation attacks.
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)