[strongSwan] Question about IKE frag

Tobias Brunner tobias at strongswan.org
Fri Apr 28 18:16:59 CEST 2017


> That would be something like that:
> - no -> announce support (but do not fragment output packets)
> - yes -> announce support and use it to fragment output packets
> 
> What do you think?

You won't be able to completely disable the feature this way.  For
example, if the peer supports it but doesn't fragment the packets
correctly.  That would require at least another possible value (like
`accept` for the `no` option above) or a strongswan.conf option.

Regards,
Tobias



More information about the Users mailing list