[strongSwan-dev] charon-nm IKEv2 Fragmentation

Richard Laager rlaager at wiktel.com
Thu Oct 20 05:18:07 CEST 2016

In src/charon-nm/nm/nm_service.c, on line 542 in connect_(), when
ike_cfg_create() is called, FRAGMENTATION_NO is passed:


Should this be FRAGMENTATION_YES instead, now that "fragmentation=yes"
is the default? In other words, is this an oversight, or is it
intentionally different (and if so, why)?

If I change that to FRAGMENTATION_YES, I can successfully connect when
IP fragments are blocked, which I cannot do with FRAGMENTATION_NO.


More information about the Dev mailing list