Hi Obi, > Is there a way to check > this during runtime? ipsec statusall > How to go about from here if pfkey is used to support the > AUTH_HMAC_SHA2_256_96 algorithm? Disable it, you don't want to use it on Linux. Regards, Tobias