Hi Troy, > ike=aes128-aes256-sha1-sha2-md5-modp1536-modp2048-modp1024! "sha2" is not a valid algorithm (but a plugin that provides hash algorithms based on the SHA2 family). Use sha256, sha384 and/or sha512 instead. Regards Martin