Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario
This commit is contained in:
@@ -14,6 +14,7 @@ conn %default
|
|||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
fragmentation=yes
|
||||||
mobike=no
|
mobike=no
|
||||||
|
|
||||||
conn net-net
|
conn net-net
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
hash_and_url = yes
|
|
||||||
load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
|
load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
|
||||||
|
|
||||||
|
fragment_size = 1400
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -14,6 +14,7 @@ conn %default
|
|||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
fragmentation=yes
|
||||||
mobike=no
|
mobike=no
|
||||||
|
|
||||||
conn net-net
|
conn net-net
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
# /etc/strongswan.conf - strongSwan configuration file
|
# /etc/strongswan.conf - strongSwan configuration file
|
||||||
|
|
||||||
charon {
|
charon {
|
||||||
hash_and_url = yes
|
|
||||||
load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
|
load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
|
||||||
|
|
||||||
|
fragment_size = 1400
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user