]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario
authorAndreas Steffen <andreas.steffen@strongswan.org>
Sat, 18 Oct 2014 12:05:18 +0000 (14:05 +0200)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Sat, 18 Oct 2014 12:05:18 +0000 (14:05 +0200)
testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf
testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf
testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf
testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf

index c3dca0d7e959f0dd0e50aee6102992e689dbb105..7292066a98be374f386bcecc5e4ba0e0545d9d29 100644 (file)
@@ -14,6 +14,7 @@ conn %default
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
+       fragmentation=yes
        mobike=no
 
 conn net-net
index 82690710b0989c41d1bf5605b8144c21cc5ce360..a0f83449a3ba1d5ac0c4cb6bac472d66a1ecfb88 100644 (file)
@@ -1,6 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  hash_and_url = yes
   load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
+
+  fragment_size = 1400
 }
index d2673d93d6b7d45521f562bdc43bdb44340e4773..2141c15c5f71bcf9b05c13ad7439a26d0bbc487e 100644 (file)
@@ -14,6 +14,7 @@ conn %default
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
+       fragmentation=yes
        mobike=no
 
 conn net-net
index 82690710b0989c41d1bf5605b8144c21cc5ce360..a0f83449a3ba1d5ac0c4cb6bac472d66a1ecfb88 100644 (file)
@@ -1,6 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  hash_and_url = yes
   load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown
+
+  fragment_size = 1400
 }