From 09b46cdb6a59398685c23b7b166d0f59ec693c16 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sat, 18 Oct 2014 14:05:18 +0200 Subject: [PATCH] Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario --- testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf | 1 + .../tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf | 3 ++- testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf | 1 + testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf | 3 ++- 4 files changed, 6 insertions(+), 2 deletions(-) diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf index c3dca0d7e..7292066a9 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf @@ -14,6 +14,7 @@ conn %default rekeymargin=3m keyingtries=1 keyexchange=ikev2 + fragmentation=yes mobike=no conn net-net diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf index 82690710b..a0f83449a 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf @@ -1,6 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - hash_and_url = yes load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown + + fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf index d2673d93d..2141c15c5 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf @@ -14,6 +14,7 @@ conn %default rekeymargin=3m keyingtries=1 keyexchange=ikev2 + fragmentation=yes mobike=no conn net-net diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf index 82690710b..a0f83449a 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf @@ -1,6 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - hash_and_url = yes load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown + + fragment_size = 1400 }