On Wed, 7 Feb 2024, Marc via Swan wrote:
This is a win10 client. What problem do I have here?
Feb 6 21:47:42 test2 pluto[1]: "vpn-ikev2-crt"[32] x.x.x.x #320: 1:ESP=AES_GCM_C_128+AES_GCM_C_256-NONE-MODP2048-ENABLED+DISABLED
so we received a proposal like: esp=aes_gcm128,aes_gcm256 with DH14 but your esp= line does not seem to allow this. It means you have a non-default esp= line that doesn't include what windows wants. Either reconfigure libreswan to add it or reconfigure windows to whaever you have on libreswan. Paul _______________________________________________ Swan mailing list Swan@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan