<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>This was the issue.<div>We solved it upon further investigation ourselves.</div><div><br></div><div>Interesting though, in IKEv1, setting the fragmentation size in charon.conf was more than enough to avoid these problems</div><div>without have to use an iptables rule to manage MSS.<br><br><br><br><hr style="width:100%;height:2px"><br><br><br>Joshua J. Gross<br><br><br><div>> Subject: Re: [strongSwan] Web sockets Can't Connect on ikev2<br>> To: grossjo2@hotmail.com; users@lists.strongswan.org<br>> From: noel@familie-kuntze.de<br>> Date: Wed, 24 Feb 2016 12:50:55 +0100<br>> <br>> Hello Joshua,<br>> <br>> That might be an MTU/MSS problem. Please read the article about Forwarding And Split-Tunneling,<br>> specifically the section about MTU/MSS issues[1].<br>> <br>> [1] https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling#MTUMSS-issues<br>> <br>> -- <br>> <br>> Mit freundlichen Grüßen/Kind Regards,<br>> Noel Kuntze<br>> <br>> GPG Key ID: 0x63EC6658<br>> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br>> <br>> <br></div></div> </div></body>
</html>