Re: Problem about reassembly and fragmentation

[Jussi Kukkonen <kukkonen@ssh.com>]

On Fri, 8 Mar 2002, Stephen Kent wrote:

> I would like to push in the direction of not having to accept 
> fragments at a BITW/BITS or SG, using ICMP PMUT message to push back 
> at hosts, so that we could avoid the need to reassemble in any mode 
> (tunnel or transport) and so that one can always apply full selector 
> sets to traffic, not having to worry about the unavailability of 
> releveant fields due to fragmentation.

What is the intented behavior of this IPsec stack when some app
sends large (>path mtu) UDP datagrams? How do you avoid fragments?

Jussi Kukkonen
SSH Communications Security