On Thu, 9 Apr 2015, Antonio Scattolini wrote:
Instead, if I put: esp=aes256-sha1;modp1024 both peers have ISAKMP SA established and IPSec SA established and also both stuck in STATE_QUICK_I2; no ping from host in lan of end 1 to host in lan of end 2 and viceversa...
you cannot be both established and in STATE_QUICK_I2? You can try aes128 instead? Paul _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
