12,271
edits
This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!
failed to create ESP context: unsupported integrity algorithm AES_XCBC_96
This really a bug in the way the StrongSwan app was built - it shouldn't negotiate something if the underlying OS can't do it! However, the easy workaround is to set up an ipsec-proposal to avoid this
#On the FB config editor create a 'Proposals for IPsec AH/ESP security association'.
#Give is a name, and set, for example, 3DES-CBC for cryptset.
#Then, back in the 'IPsec IKE connection settings' select the new Proposal in the 'ipsec-proposals' drop down.
|
edits