Distribution EOLE » Commun » eole-vpn

bonjour,

c'est loin ( pas si loin que ça ;-) ) mais ne serait-il pas intéressant d'implémenter fragmentation = yes sur la version 2.6

• fragmentation = yes | force | no

• Charger le plugin lié charon.plugins.kernel-netlink
  • mss à templatiser
  • mtu à templatiser

Exemple :

.......
.......
charon {
        load_modular = yes
        .......
        .......
        plugins {
                kernel-netlink {
                mtu = 1300
                mss = 1300
                }
        }
        .......
        .......
}
.......
.......

whether to use IKE fragmentation (proprietary IKEv1 extension or IKEv2 fragmentation as per RFC 7383).
Fragmented messages sent by a peer are always accepted irrespective of the value of this option.
If set to yes and the peer supports it, larger IKE messages will be sent in fragments (the maximum fragment size
can be configured in strongswan.conf). If set to force (only supported for IKEv1) the initial IKE message will already
be fragmented if required.
Available for IKEv1 connections since 5.0.2 and for IKEv2 connections since 5.2.1.