Hi Ravi, The NON_FIRST_FRAGMENTS_ALSO notify which strongSwan does not support is about controlling the fragmentation of ESP packets and doesn't have anything to do with RFC 7383 IKEv2 fragmentation where an IKEV2_FRAGMENTATION_SUPPORTED notification is used.
Best regards Andreas On 01/07/2015 06:01 PM, Ravi Kanth Vanapalli wrote: > Dear All, > > Does Strongswan Android market app support > sending NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message to the > gateway. > > Also I have a query regarding this attribute NON_FIRST_FRAGMENTS_ALSO > > RFC 5996 reads below > " > The NON_FIRST_FRAGMENTS_ALSO notification is used for > fragmentation control. Both parties need to agree to sending non-first > fragments before either party does so. It is enabled only if > NON_FIRST_FRAGMENTS_ALSO notification is included in both the request > proposing an SA and the response accepting it. If the responder does not > want to send or receive non-first fragments, it only omits > NON_FIRST_FRAGMENTS_ALSO notificationfrom its response, but does not > reject the whole Child SA creation." > " > > Questions > 1) Does this mean to support IKE layer fragmentation UE needs to send > NON_FIRST_FRAGMENTS_ALSO in the first IKE_AUTH message ? > 2) Does the statement mean, only once initiator and responder agree on > IKE layer fragmentation with the use of this notification payload, does > fragmented IKE layer exchanges take place ? > > Kindly help clarify this query. > -- > Regards, > RaviKanth VN Vanapalli > > > > _______________________________________________ > Users mailing list > [email protected] > https://lists.strongswan.org/mailman/listinfo/users > -- ====================================================================== Andreas Steffen [email protected] strongSwan - the Open Source VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]==
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
