On 2/16/2018 3:39 AM, Sujoy wrote:
The config file is same but then also it failed by saying "unable to install inbound and outbound IPsec SA (SAD) in kernel failed to establish CHILD_SA, keeping IKE_SA".
It is failing with the error "IPsec SA: unsupported mode". That means transport (USE_TRANSP one line above) mode is not supported. This is due to using kernel-libipsec plugin (look at the loaded plugins list) which doesn't not implement transport mode as far as I know. Either disable that plugin or switch back to tunnel mode.
