[strongSwan] Web sockets Can't Connect on ikev2

joshua gross grossjo2 at hotmail.com
Wed Feb 24 13:26:59 CET 2016


This was the issue.We solved it upon further investigation ourselves.
Interesting though, in IKEv1, setting the fragmentation size in charon.conf was more than enough to avoid these problemswithout have to use an iptables rule to manage MSS.






Joshua J. Gross


> Subject: Re: [strongSwan] Web sockets Can't Connect on ikev2
> To: grossjo2 at hotmail.com; users at lists.strongswan.org
> From: noel at familie-kuntze.de
> Date: Wed, 24 Feb 2016 12:50:55 +0100
> 
> Hello Joshua,
> 
> That might be an MTU/MSS problem. Please read the article about Forwarding And Split-Tunneling,
> specifically the section about MTU/MSS issues[1].
> 
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling#MTUMSS-issues
> 
> -- 
> 
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
> 
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
> 
> 
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160224/ffcf065d/attachment.html>


More information about the Users mailing list