[strongSwan] Strongswan to ASA failing with NO_PROP in QUICKMODE and aggressive psk

Martin Willi martin at strongswan.org
Thu Jul 4 08:38:44 CEST 2013


Hi Noel,

>         esp=aes256-sha1-modp1024

> generating QUICK_MODE request 3418582762 [ HASH SA No KE ID ID ]
> parsed INFORMATIONAL_V1 request 3526216300 [ HASH N(NO_PROP) ]
> received NO_PROPOSAL_CHOSEN error notify

Looks like the gateway does not like the configured ESP proposal. Have
you tried a different proposal, for example without PFS?

   esp=aes256-sha1!

Regards
Martin





More information about the Users mailing list