[strongSwan] ikev2: Tunnel established inspite of different phase 2 DH group

[Tobias Brunner]

Hi Makarand,

> Is there a way I can force a CHILD_SA delete when the Proposal mismatch occurs?

No, but plugins can listen for alerts of type
ALERT_PROPOSAL_MISMATCH_CHILD, which is also possible via error-notify
plugin [1].

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/ErrorNotifyPlugin