IKEv2 fragmentation

The fragmentation of data packets is controlled by the maximum transmission unit (MTU). The MTU is the maximum size that a packet may have in order to be sent as payload over a channel. The two communication partners negotiate this during connection establishment in order to optimize data transmission by avoiding any additional fragmentation of the data packets.

In LCOS, IKEv2 fragmentation is enabled automatically. You can manually specify a maximum MTU if you wish.

To do this in LANconfig, go to VPN > IKEv2/IPSec > Extended settings.





Enter the maximum IP packet length/size in bytes into the MTU field in the Fragmentation section. Smaller values lead to greater fragmentation of the payload data.

IKEv2 fragmentation as per RFC 7383 enables the VPN router to fragment IKEv2 messages by itself, which is more efficient than having IKE-packet fragmentation performed by the transport network. Two methods of IKEv2 fragmentation are supported:

Note: The device sets the best method automatically. If a VPN remote site supports both methods, fragmentation as per RFC 7383 is preferred.

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo