diff options
author | Andreas Steffen <andreas.steffen@strongswan.org> | 2014-10-18 14:05:18 +0200 |
---|---|---|
committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2014-10-18 14:05:18 +0200 |
commit | 09b46cdb6a59398685c23b7b166d0f59ec693c16 (patch) | |
tree | b472f4bbb3b1fa6d528b4b3ac09493ea8526c46d /testing/tests/ipv6/net2net-ikev2/hosts | |
parent | 4b1b91913a9ff89efe21bda7981c0c0411493b62 (diff) | |
download | strongswan-09b46cdb6a59398685c23b7b166d0f59ec693c16.tar.bz2 strongswan-09b46cdb6a59398685c23b7b166d0f59ec693c16.tar.xz |
Enabled IKEv2 fragmentation in ipv6/net2net-ikev2 scenario
Diffstat (limited to 'testing/tests/ipv6/net2net-ikev2/hosts')
4 files changed, 6 insertions, 2 deletions
diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf index c3dca0d7e..7292066a9 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/ipsec.conf @@ -14,6 +14,7 @@ conn %default rekeymargin=3m keyingtries=1 keyexchange=ikev2 + fragmentation=yes mobike=no conn net-net diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf index 82690710b..a0f83449a 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf @@ -1,6 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - hash_and_url = yes load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown + + fragment_size = 1400 } diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf index d2673d93d..2141c15c5 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/ipsec.conf @@ -14,6 +14,7 @@ conn %default rekeymargin=3m keyingtries=1 keyexchange=ikev2 + fragmentation=yes mobike=no conn net-net diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf index 82690710b..a0f83449a 100644 --- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf +++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf @@ -1,6 +1,7 @@ # /etc/strongswan.conf - strongSwan configuration file charon { - hash_and_url = yes load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac stroke kernel-netlink socket-default updown + + fragment_size = 1400 } |