[strongSwan] does strongswan android client support sending NON_FIRST_FRAGMENTS_ALSO in notify payload
Martin Willi
martin at strongswan.org
Thu Jan 8 11:27:00 CET 2015
Hi,
> 1) Does this mean to support IKE layer fragmentation UE needs to send
> NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message ?
NON_FIRST_FRAGMENT_ALSO is unrelated to IKE message fragmentation as
defined by RFC7383, but defines how to handle non-first fragments on
tunnel mode payload traffic (over ESP).
strongSwan never sends this notify and ignores it. Please refer to
RFC4301 7.2 for more details about support for non-initial fragments.
Regards
Martin
More information about the Users
mailing list