From 8f0380a933f420320716de61a5838400117dbb8a Mon Sep 17 00:00:00 2001 From: yyamashita Date: Thu, 2 Jul 2026 00:52:41 +0900 Subject: Disable IKE fragmentation, use IP-level fragmentation for iOS iOS may have a bug where it advertises N(FRAG_SUP) but fails to reassemble IKE fragments in IKE_AUTH responses. Switching to fragmentation=no forces the large IKE_AUTH response to be sent as a single UDP packet with IP-level fragmentation, which iOS's standard IP stack handles correctly. Co-Authored-By: Claude Sonnet 4.6 --- vpn/strongswan.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'vpn/strongswan.conf') diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf index 4c04b41..d3a7f93 100644 --- a/vpn/strongswan.conf +++ b/vpn/strongswan.conf @@ -1,6 +1,6 @@ charon { load_modular = yes - fragment_size = 512 + plugins { include strongswan.d/charon/*.conf } -- cgit v1.2.3