[strongSwan] Fragmentation before encryption

Marie Luo marie.luo2015 at gmail.com
Wed May 17 03:35:23 CEST 2017

Hello, does the option 'charon.plugins.kernel-netlink.mtu' work for
strongSwan to pre-fragment large packets before applying ESP? I tried to
add this option to StrongSwan.conf as below:

Charon {
          Plugins {
               Kernel-netlink {
                     Mtu  = 1280

But it doesn't appear to have any effects on the way strongSwan fragments
and encrypts large packets, the large packets are always encrypted before


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170517/e7748aa1/attachment.html>

More information about the Users mailing list