[strongSwan] Can't connect to VPN after upgrading from 5.7.2 to 5.8.2

Tobias Brunner tobias at strongswan.org
Mon Apr 6 17:31:16 CEST 2020


Hi Philipp,

> Apr 06 16:14:54 linux.fritz.box charon-nm[2251]: 03[IKE] no acceptable 
> traffic selectors found
> Apr 06 16:14:54 linux.fritz.box charon-nm[2251]: 03[IKE] failed to 
> establish CHILD_SA, keeping IKE_SA
> 
> However the "selected proposal:" line didn't change and I was unable to 
> find helpful results when googling these lines.

Traffic selectors (i.e. subnets/protocols etc.) have nothing to do with
the proposals (e.g. algorithms, mode etc.).  You get more messages if
you increase the log level for cfg (see [1], set log levels in the
charon-nm.syslog.daemon section).

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration


More information about the Users mailing list