1.3.13 IKEv2 Fragmentation

  • Article

Similar to the IKE fragmentation case described in section 1.3.2, IKEv2 fragmentation is a new solution that improves security by avoiding IP-level fragmentation. For larger IKEv2 messages that exceed the path maximum transmission unit (MTU) size, instead of taking the risk of incurring IP-level fragmentation, IKEv2 itself performs fragmentation so that the resulting IP datagrams are small enough to avoid fragmentation taking place at the IP-level.