On Wed, 20 Jan 2021, António Silva wrote:

Hi,
I recently update to version 4.1 and the parameter “ike-frag=yes” is invalid 
and ipsec don’t start:

Jan 20 22:25:37 sol ipsec[4132]: cannot load config '/etc/ipsec.conf': 
/etc/ipsec.d/con8.conf:30: syntax error,
unexpected STRING [ike-frag]

I search in the source code and effective this keyword doesn’t exist anymore..  
  

The keywors is now called fragmentation=

The wiki is broken:
https://libreswan.org/wiki/VPN_server_for_remote_clients_using_IKEv1_XAUTH_with_Certificates#ike-frag.3D_option

updated.


Instead, found a new “fragmentation” parameter, should i change “ike-frag=yes” to 
"fragmentation=yes” ?

yes.

Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to