On 10/27/2013 11:20 PM, Yoav Nir wrote:
I guess the idea is that if the packet is still bigger than the PMTU, then the IKE host gets back a "fragmentation needed" ICMP, and the IKE daemon learns of that and resends packets with appropriately small size. There are some issues with this:
You proceed to describe how PMTUD works, but this is intended (AFAICT) to be more like PLMUTD - which does not rely on ICMPs.
Joe _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
