Re: [strongSwan] udp packet size

2015-03-16 Thread Steffen Plotner
Hi Fred, -Original Message- On 12/03/2015 02:35, Steffen Plotner wrote: Hi, Strongswan 5.2.2 on linux (centos 6) IKEv2 configuration for windows clients I have the following problem: Initiator sends IKE_SA_INIT Server responds with IKE_SA_INIT Initiator sends IKE_AUTH

Re: [strongSwan] udp packet size

2015-03-16 Thread Fred
On 12/03/2015 02:35, Steffen Plotner wrote: Hi, Strongswan 5.2.2 on linux (centos 6) IKEv2 configuration for windows clients I have the following problem: Initiator sends IKE_SA_INIT Server responds with IKE_SA_INIT Initiator sends IKE_AUTH Server responds with a fragmented IP packet of 1514

Re: [strongSwan] udp packet size

2015-03-12 Thread Fred
On 12/03/2015 08:29, Martin Willi wrote: IKEv2 fragmentation is a protocol extension (RFC 7383), and AFAIK it is not supported in the Windows client. So you can't use it with these clients, but have to try to avoid messages larger than your MTU to get things working on such constrained networks.

[strongSwan] udp packet size

2015-03-11 Thread Steffen Plotner
Hi, Strongswan 5.2.2 on linux (centos 6) IKEv2 configuration for windows clients I have the following problem: Initiator sends IKE_SA_INIT Server responds with IKE_SA_INIT Initiator sends IKE_AUTH Server responds with a fragmented IP packet of 1514 bytes (the MTU is 1500 on the outgoing