[strongSwan-dev] [strongSwan] does strongswan android client support sending NON_FIRST_FRAGMENTS_ALSO in notify payload
andreas.steffen at strongswan.org
Wed Jan 14 04:06:58 CET 2015
The NON_FIRST_FRAGMENTS_ALSO notify which strongSwan does not
support is about controlling the fragmentation of ESP packets
and doesn't have anything to do with RFC 7383 IKEv2 fragmentation
where an IKEV2_FRAGMENTATION_SUPPORTED notification is used.
On 01/07/2015 06:01 PM, Ravi Kanth Vanapalli wrote:
> Dear All,
> Does Strongswan Android market app support
> sending NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message to the
> Also I have a query regarding this attribute NON_FIRST_FRAGMENTS_ALSO
> RFC 5996 reads below
> The NON_FIRST_FRAGMENTS_ALSO notification is used for
> fragmentation control. Both parties need to agree to sending non-first
> fragments before either party does so. It is enabled only if
> NON_FIRST_FRAGMENTS_ALSO notification is included in both the request
> proposing an SA and the response accepting it. If the responder does not
> want to send or receive non-first fragments, it only omits
> NON_FIRST_FRAGMENTS_ALSO notificationfrom its response, but does not
> reject the whole Child SA creation."
> 1) Does this mean to support IKE layer fragmentation UE needs to send
> NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message ?
> 2) Does the statement mean, only once initiator and responder agree on
> IKE layer fragmentation with the use of this notification payload, does
> fragmented IKE layer exchanges take place ?
> Kindly help clarify this query.
> RaviKanth VN Vanapalli
> Users mailing list
> Users at lists.strongswan.org
Andreas Steffen andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution! www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 4255 bytes
Desc: S/MIME Cryptographic Signature
More information about the Dev