[strongSwan] Strong swan IKE issue.
Tobias Brunner
tobias at strongswan.org
Mon Mar 19 18:52:38 CET 2018
Hi Andrii,
> I see the problem on IKE side, but don’t know how to debug and fix it.
The log tells you _exactly_ what the problem is:
> 12[ENC] parsed INFORMATIONAL_V1 request 2090615229 [ HASH N(NO_PROP) ]
> 12[IKE] received NO_PROPOSAL_CHOSEN error notify
The peer doesn't like the crypto proposal sent by the client. So fix
the `esp` setting in the config (maybe you have to enabled PFS by adding
a DH group, ask the other server admin for the correct algorithms).
Regards,
Tobias
More information about the Users
mailing list