<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Hi,</div>
<div> </div>
<div>Strongswan 5.2.2 on linux (centos 6) IKEv2 configuration for windows clients I have the following problem:</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Initiator sends IKE_SA_INIT</div>
<div>Server responds with IKE_SA_INIT</div>
<div>Initiator sends IKE_AUTH</div>
<div>Server responds with a fragmented IP packet of 1514 bytes (the MTU is 1500 on the outgoing interface).</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>I have determined using wireshark, that the fragment gets dropped by someone… if the client is behind Comcast link it works, and behind a roadrunner link it fails.</div>
<div> </div>
<div>My more specific question is why is the outgoing UDP packet size greater than the MTU size on the interface?</div>
<div> </div>
<div>I have tried to modify the charon.fragment_size and conn specific fragmentation settings and cannot get this modify the behavior. If we could get the UDP packet size to be below the MTU of the interface, that would help.</div>
<div> </div>
<div>Steffen</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Courier New" size="1"><span style="font-size:8pt;">_______________________________________________________________________________________________</span></font></div>
<div><font face="Courier New" size="1"><span style="font-size:8pt;">Steffen Plotner Amherst College Tel (413) 542-2348</span></font></div>
<div><font face="Courier New" size="1"><span style="font-size:8pt;">Systems/Network Administrator/Programmer PO BOX 5000 Fax (413) 542-2626</span></font></div>
<div><font face="Courier New" size="1"><span style="font-size:8pt;">Systems & Networking Amherst, MA 01002-5000 swplotner@amherst.edu</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
</body>
</html>