Hi, There are a lot of exchanges in your log, and many of them fail for different reasons. The error
> 14[IKE] failed to establish CHILD_SA, keeping IKE_SA results from > 14[IKE] received NO_PROPOSAL_CHOSEN notify, no CHILD_SA built which means that the other peer does not accept the crypto proposal strongSwan offers for the CHILD_SA. The log of your responder might have more details why it does not like it. You can change the proposal using the "esp" keyword, have a look at the ipsec.conf manpage for details. Regards Martin _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
