Question of ESP failure when device receives Packet Too Big ICMPv6 message

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi All,

We have the below scenario. Devices are IPsec tunnel mode configured.   Ref device  sends fragmented ping requests. Our device responds with unfragmented ping response. Router send packet too big with proposed MTU as 1280 and payload
as ESP packet number 3.  As soon as our device receives the Packet Too Big ICMPv6 packet, device becomes unresponsive for the next ping request from ref device. However our device is responding for ISAKMP informational messages from the 
ref device. Has anyone experience such issues.  Our device configuration are  Linux 4.9.180 #1 SMP PREEMPT Fri Oct 23 23:29:20 America 2020 aarch64 GNU/Linux. Any inputs are appreciated.

Our device 		Router		Ref device			PKt Num
<------------------------------	|----------------	Fragmented Ping Request	1  (ESP)
<------------------------------	|----------------	Fragmented Ping Request	2  (ESP)
--------------------------------	|--------------->	Unfragmented ping response	3  (ESP
<------------------------------	|						4  (non ESP)
  (Packet too big)
<------------------------------	|----------------	Fragmented Ping Request	5  (ESP)
<------------------------------	|----------------	Fragmented Ping Request	6  (ESP)


Regards,
Jayalakshmi





[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux