Change Log

Summary

Default Tunnel SA/Interface MTU

How are tunnel SA's MTU like 1422 and 1438 calculated?

Fundamental

AES256-SHA256 (Non-NAT-T)

AES256-SHA256 (NAT-T)

AES256-SHA384 (Non-NAT-T)

AES256-SHA384 (NAT-T)

Summary

Why does IPsec need fragmentation?

IKE Fragmentation (Control plane)

IPsec fragmentation (Data plane)

Post-encapsulation

Pre-encapsulation

How to send ESP packets without fragmentation?

PMTU

Intro

PMTU in IPSec

PMTU Detection

ipv4-df