linux-ipsec: Fragmentation

Hi all,

        Sorry if this question has been asked before on the list (I cant retrieve the archive for some reason), when I setup an SA and try sending an UDP datagram of 2000 bytes the fragment seems to be dropped (the reason being that the IP packets are being secured after fragmentation ?), but I thought the standard requirements were that packets be secured before fragmentation, am I missing something here ?, any help is welcome, thanks in advance.

• Ravi.

p.s: I am using freeswan-0.90 on linux 2.0.34 kernel. Received on Wed Sep 16 00:53:51 1998