https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN
<https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN>
---
Andrii Petrenko
apl...@gmail.com
> On Apr 16, 2018, at 11:26, Kaushal Shriyan <kaushalshri...@gmail.com> wrote:
>
> Hi,
>
>
lease help.
Thank you,
Andrii Petrenko
apl...@gmail.com <mailto:apl...@gmail.com>
Hello Tobias,
Thank you for details.
I’ve already tased with
esp=aes256-sha1!
esp=aes128-sha1!
esp=3des-md5!
No luck. Requested logs and configs from ASA by
debug crypto ikev1 127
debug crypto ipsec 127
show crypto ipsec sa
Thank you,
Andrii Petrenko
apl...@gmail.com <mailto:
nabled by specifying a DH group in the 'esp' cipher
suite
I have no DH group specified for ESP on my side:
esp=aes256-sha1!
Thank you,
Andrii Petrenko
apl...@gmail.com <mailto:apl...@gmail.com>
> On Mar 20, 2018, at 8:07 AM, Andrii Petrenko <apl...@gmail.com> wrote:
>
&g
/)
xx.xx.xx.xx Main Mode Handshake returned HDR=(CKY-R=8d51ab7680ad)
SA=(Enc=AES KeyLength=256 Hash=SHA1 Group=5:modp1536 Auth=PSK LifeType=Seconds
LifeDuration=28800)
> On Mar 19, 2018, at 11:01, Andrii Petrenko <apl...@gmail.com> wrote:
>
> Tobias, thank you for reply.
&
INFORMATIONAL_V1 request 76122219 [ HASH N(NO_PROP) ]
12[IKE] received NO_PROPOSAL_CHOSEN error notify
Thank you,
AP
> On Mar 19, 2018, at 15:22, Andrii Petrenko <apl...@gmail.com> wrote:
>
> Tobias,
>
> I’ve tried ike-scan and what I see:
>
> ~/ike-scan$ sudo ik