Hello All,
I have a question about the IPSEC gateway.
When an IPSEC gateway received a fragmented packet(for
example, use ping -s 2000 send a large icmp packet), the IPSEC gateway will
forward this packet to another IPSEC gateway. It will enlarge the packet. Since
this is a fragmented packet, It will be refragmented in ip_send() function. The
other IPSEC gateway can defrag these fragmented packets? Below is a dtaield data
flow:
ping -s 2000 192.168.0.33 command created two icmp packets:
The first (named A) is 1500, the second (named B) is 548. IPSEC gateway will
forward the two packets and enlarge them. The first packet A will be fragmented
to A1 and A2. When another IPSEC receives the thress packets, A1, A2, A3, how to
defarg them? Do we need to defarg A1 and A2 first?
Please help me!
Thank you in advance!
|