[strongSwan] Fragmentation before encryption

[Marie Luo]

Hello, does the option 'charon.plugins.kernel-netlink.mtu' work for
strongSwan to pre-fragment large packets before applying ESP? I tried to
add this option to StrongSwan.conf as below:

Charon {
          Plugins {
               Kernel-netlink {
                     Mtu  = 1280
              }
         }
}

But it doesn't appear to have any effects on the way strongSwan fragments
and encrypts large packets, the large packets are always encrypted before
fragmention.

Thanks

Marie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170517/e7748aa1/attachment.html>