Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario

2014-10-18 14:05:18 +02:00
parent 4b1b91913a
commit 09b46cdb6a
4 changed files with 6 additions and 2 deletions
@@ -14,6 +14,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev2
+	fragmentation=yes
 	mobike=no

 conn net-net
@@ -1,6 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  hash_and_url = yes
  load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
+
+  fragment_size = 1400
 }
@@ -14,6 +14,7 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev2
+	fragmentation=yes
 	mobike=no

 conn net-net
@@ -1,6 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  hash_and_url = yes
  load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
+
+  fragment_size = 1400
 }