[strongSwan] Error : remote host is behind NAT - received proposals inacceptable - generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
kariukims at gmail.com
Wed Feb 13 19:38:55 CET 2019
Thanks Tobias for the quick response. I set this up, the Registry value and
below configuration, but still the same error.
charondebug="ike 1, knl 1, cfg 0"
Thanks a lot
On Wed, Feb 13, 2019 at 5:45 PM Tobias Brunner <tobias at strongswan.org>
> Hi Moses,
> Configure an IKE proposal that's accepted by your peer (you disabled log
> message for cfg, so you didn't see the details of the proposal
> negotiation). Most likely the problem is that modp1024 is proposed, a
> DH group strongSwan doesn't include in its default IKE proposal anymore.
> So to use it, IKE proposals have to be configured explicitly. Also see
>  for information on how to get Windows to use at least modp2048.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users