[strongSwan] Timeout on the first phase using RSA

Tobias Brunner tobias at strongswan.org
Fri May 22 15:36:04 CEST 2015


Hi,

> Can you give me the tips - where is the root of the problem - server, 
> client or strongswan ?

Some routers/firewalls may drop IP fragments.  To avoid fragments on the
IP layer you could try enabling IKE fragmentation with fragmentation=yes
in your config.

Regards,
Tobias



More information about the Users mailing list