[strongSwan] Strong swan IKE issue.

Tobias Brunner tobias at strongswan.org
Mon Mar 19 18:52:38 CET 2018


Hi Andrii,

> I see the problem on IKE side, but don’t know how to debug and fix it.

The log tells you _exactly_ what the problem is:

> 12[ENC] parsed INFORMATIONAL_V1 request 2090615229 [ HASH N(NO_PROP) ]
> 12[IKE] received NO_PROPOSAL_CHOSEN error notify

The peer doesn't like the crypto proposal sent by the client.  So fix
the `esp` setting in the config (maybe you have to enabled PFS by adding
a DH group, ask the other server admin for the correct algorithms).

Regards,
Tobias


More information about the Users mailing list