<div dir="ltr">Hello, <div><br></div><div>While trying to test strongswan with IKE DH group-19, the negotiation somehow doesn't go past main mode 2. There is however no log to describe the error that prevents the negotiation. </div><div><br></div><div>Could someone post some insight? My configs looks like this:</div><div>







<p class="gmail-p1"><span class="gmail-Apple-tab-span"> </span>keyexchange=ikev1</p><p class="gmail-p1">        type=transport</p>
<p class="gmail-p1">        ikelifetime=480m</p>
<p class="gmail-p1"><span class="gmail-Apple-tab-span"> </span>ike=aes256-sha256-ecp256!</p>
<p class="gmail-p1"><span class="gmail-Apple-tab-span"> </span>esp=aes256-sha256!</p>
<p class="gmail-p1"><span class="gmail-Apple-tab-span"> </span>left=9.11.120.120</p>
<p class="gmail-p1">        leftprotoport=17/1812</p>
<p class="gmail-p1">        right=9.11.53.11</p>
<p class="gmail-p1">        rightprotoport=17/0-1812</p>
<p class="gmail-p1">        pfs=no</p>
<p class="gmail-p1">        authby=psk</p>
<p class="gmail-p1">        auto=add</p><p class="gmail-p1"><br></p><p class="gmail-p1">Thanks,</p><p class="gmail-p1">Lakshmi</p></div><div><br></div><div><br></div><div><br></div></div>