[strongSwan-dev] [strongSwan] does strongswan android client support sending NON_FIRST_FRAGMENTS_ALSO in notify payload

[Andreas Steffen]

Hi Ravi,

The NON_FIRST_FRAGMENTS_ALSO notify which strongSwan does not
support is about controlling the fragmentation of ESP packets
and doesn't have anything to do with RFC 7383 IKEv2 fragmentation
where an IKEV2_FRAGMENTATION_SUPPORTED notification is used.

Best regards

Andreas

On 01/07/2015 06:01 PM, Ravi Kanth Vanapalli wrote:
> Dear All,
> 
> Does Strongswan Android market app support
> sending NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message to the
> gateway.
> 
> Also I have a query regarding this attribute NON_FIRST_FRAGMENTS_ALSO
> 
> RFC  5996 reads below
> "
>  The NON_FIRST_FRAGMENTS_ALSO notification is used for
> fragmentation control. Both parties need to agree to sending non-first
> fragments before either party does so. It is enabled only if
> NON_FIRST_FRAGMENTS_ALSO notification is included in both the request
> proposing an SA and the response accepting it. If the responder does not
> want to send or receive non-first fragments, it only omits
> NON_FIRST_FRAGMENTS_ALSO notificationfrom its response, but does not
> reject the whole Child SA creation."
> "
> 
> Questions
> 1) Does this mean to support IKE layer fragmentation UE needs to send
> NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message ?
> 2) Does the statement mean, only once initiator and responder agree on
> IKE layer fragmentation with the use of this notification payload, does
> fragmented IKE layer exchanges take place ?
> 
> Kindly help clarify this query.
> -- 
> Regards,
> RaviKanth VN Vanapalli
> 
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
> 

-- 
======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4255 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150114/2853076a/attachment.bin>