From 2854b063b4cea071be2e90eb059fef095c26d9a1 Mon Sep 17 00:00:00 2001 From: yyamashita Date: Thu, 2 Jul 2026 21:48:03 +0900 Subject: Re-enable IKE fragmentation (remove fragmentation=no) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Android 12 IKEv2 may handle IKE-level fragments better than IP-level fragmentation. iOS was failing with IKE fragmentation previously (ECDSA cert era) — test if RSA cert + IKE fragmentation now works for both platforms. Co-Authored-By: Claude Sonnet 4.6 --- vpn/swanctl.conf.tpl | 1 - 1 file changed, 1 deletion(-) (limited to 'vpn') diff --git a/vpn/swanctl.conf.tpl b/vpn/swanctl.conf.tpl index 1455bcf..cfce4b1 100644 --- a/vpn/swanctl.conf.tpl +++ b/vpn/swanctl.conf.tpl @@ -1,7 +1,6 @@ connections { ikev2-eap { version = 2 - fragmentation = no # iOS/macOS/Android 互換の暗号スイート proposals = aes256gcm16-prfsha256-ecp256,aes256-sha256-ecp256,aes256gcm16-prfsha384-ecp384,aes256-sha256-modp2048,aes256-sha1-modp2048 -- cgit v1.2.3