Hi Stephen, > I have already advised the team that Aggressive > mode with psk is unsafe.
If you are at it, they shouldn't use IKEv1 or L2TP (if they actually do) anymore either. Looks like you might now have to add leftsourceip=%config again (the peer is apparently not ready yet to accept Quick Mode requests, so it might be waiting for Mode Config). Regards, Tobias
