[strongSwan] Please help - Using strongSwan to connect to CheckPoint VPN-1

[Dimitrios Siganos]

Sucha Singh wrote:
> Hi Andreas,
>
> Reviewing the above settings I added the following line to the ipsec.conf:
>
> ike=3des-sha1-md5-modp1024
>
> I then get the following errors:
>
> 002 "test" #1: initiating Main Mode
> 003 "test" #1: no IKE algorithms for this connection (check ike algorithm string)
> 003 "test" #1: empty ISAKMP SA proposal to send (no algorithms for ike selection?)
>
> Was I right to add the above setting
That setting looks wrong to me. You probably want:

ike=3des-sha1-modp1024
or
ike=3des-md5-modp1024
or both
ike=3des-sha1-modp1024,3des-md5-modp1024

Dimitris Siganos