<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div>Hi ,</div><div><br></div><div>I am using the modpnull Diffie-Hellman gr to avoid the DH calculation overhead (strongswan-5.0.4). But it is unable to establish the security association. Here goes the logs at IKE responder end. Can anyone please suggest what is the wrong? </div><div><br></div><div>11[CFG] received stroke: add connection 'host-host'<br>11[CFG] adding virtual IP address pool 10.0.0.0/8<br>11[CFG] added configuration 'host-host'<br>13[NET] <1> received packet: from 30.30.30.11[500] to 30.30.30.21[500] (176 bytes)<br>13[ENC] <1> parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<br>13[CFG] <1> an algorithm from private space would match, but peer implementation is unknown, skipped<br>13[CFG] <1>
received proposals: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_NULL<br>13[CFG] <1> configured proposals: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_NULL<br>13[IKE] <1> received proposals inacceptable<br>13[ENC] <1> generating IKE_SA_INIT response 0 [ N(NO_PROP) ]<br>13[NET] <1> sending packet: from 30.30.30.21[500] to 30.30.30.11[500] (36 bytes)<br></div><div><br></div><div>Regards,</div><div>Chinmaya</div><div></div></div></body></html>