diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 16:56:24 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 16:56:24 +0900 |
| commit | 0116cbb2c58871a4032c9cdb2044033751f12a95 (patch) | |
| tree | 7869f18be43a39fe6c33c05f51cca3ff3272a9e3 | |
| parent | 5a7b068b67bfe623f6bc1a62dcddfca2535c3a46 (diff) | |
Revert fragmentation=no to restore iPhone VPN connectivity
fragmentation=no caused IP-level fragmentation (1808-byte packets) which is
blocked by mobile networks. Default IKE fragmentation (RFC 7383) works for
iOS/macOS with 2 fragments.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
| -rw-r--r-- | vpn/swanctl.conf.tpl | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/vpn/swanctl.conf.tpl b/vpn/swanctl.conf.tpl index 1fc84df..da988e0 100644 --- a/vpn/swanctl.conf.tpl +++ b/vpn/swanctl.conf.tpl @@ -1,7 +1,6 @@ connections { ikev2-eap { version = 2 - fragmentation = no # iOS/macOS/Android 互換の暗号スイート proposals = aes256gcm16-prfsha256-ecp256,aes256-sha256-ecp256,aes256gcm16-prfsha384-ecp384,aes256-sha256-modp2048,aes256-sha1-modp2048 |