[strongSwan-dev] charon-nm IKEv2 Fragmentation
rlaager at wiktel.com
Thu Oct 20 05:18:07 CEST 2016
In src/charon-nm/nm/nm_service.c, on line 542 in connect_(), when
ike_cfg_create() is called, FRAGMENTATION_NO is passed:
Should this be FRAGMENTATION_YES instead, now that "fragmentation=yes"
is the default? In other words, is this an oversight, or is it
intentionally different (and if so, why)?
If I change that to FRAGMENTATION_YES, I can successfully connect when
IP fragments are blocked, which I cannot do with FRAGMENTATION_NO.
More information about the Dev