Hello All,
 
I have a question about the IPSEC gateway.
 
When an IPSEC gateway received a fragmented packet(for example, use ping -s 2000 send a large icmp packet), the IPSEC gateway will forward this packet to another IPSEC gateway. It will enlarge the packet. Since this is a fragmented packet, It will be refragmented in ip_send() function. The other IPSEC gateway can defrag these fragmented packets? Below is a dtaield data flow:
 
ping -s 2000 192.168.0.33 command created two icmp packets: The first (named A) is 1500, the second (named B) is 548. IPSEC gateway will forward the two packets and enlarge them. The first packet A will be fragmented to A1 and A2. When another IPSEC receives the thress packets, A1, A2, A3, how to defarg them? Do we need to defarg A1 and A2 first?
 
Please help me!
 
Thank you in advance!
 
 
 
 
 
 
 

Reply via email to