Supposed problem with the 'fragment' directive

amarcine

I got configuration file for OpenVPN from my university, which contains the 'fragment' directive. It is said that, IOS client does not support it, nor it supports connecting to a server which is configured with 'fragment'. Indeed if I try to load this configuration to the IOS client, it fails to initialize the connection and prints the above warning. If I remove the directive from the client config, then it connects, but if I try to use e.g. ssh to connect to the machine at the university, the ssh is unable to connect. I guess, but have no confirmation, that this is because the OpenVPN server side uses fragment. With the original config and a PC (both Windows and Linux) client, everything (e.g. ssh) works fine.

So the question is: Does it look likely that the failure of ssh connection with the IOS client and the config without 'fragment', is due to the server side using 'fragment'?

If the answer to above is 'yes', then please add support for the 'fragment' directive in the IOS client. I am not able to persuade the university to change their server config. I know that others already pleaded, but I hope more voices makes better motivation for the developers :-)

Traffic

amarcine wroteI got configuration file for OpenVPN from my university, which contains the 'fragment' directive. It is said that, IOS client does not support it, nor it supports connecting to a server which is configured with 'fragment'.

Have you informed your university of their problem ?

amarcine

Yes. They said nobody complained about it and, since for PC clients everything works fine and changing the configuration might require action for all users, they are not going to change the configuration.

But do you think, that what I observe could be because server is configured with fragment, while the client is not?

Anyway, if the fragment is the issue, it would be good if it was implemented in iOS client, if it is valid in other OpenVPN software.

Traffic

amarcine wroteThey said nobody complained about it and, since for PC clients everything works fine and changing the configuration might require action for all users, they are not going to change the configuration.

You must be the first iOS user to ask .. and there will be more to come .. Put up a Flyer in the common room and let other people know your University IT department is too stupid/stubborn/Lazy to support them. Start a movement :ugeek: