"
I can not get pfs to work in the tunnel.
Right now the tunnel is working, but without pfs.
As i understood, in the child section, in the phase 2 esp section there has to be choosen the same df group as on the fortigate.
The groups are the same, as the encryption type: aes128-sha256 (dh 14).
But the error always is : 06[IKE1] <ce786d32-7e3b-435e-aa63-c7121b0c2664|1961> received NO_PROPOSAL_CHOSEN error notify
Any hints how to get this to work?
Right now the tunnel is working, but without pfs.
As i understood, in the child section, in the phase 2 esp section there has to be choosen the same df group as on the fortigate.
The groups are the same, as the encryption type: aes128-sha256 (dh 14).
But the error always is : 06[IKE1] <ce786d32-7e3b-435e-aa63-c7121b0c2664|1961> received NO_PROPOSAL_CHOSEN error notify
Any hints how to get this to work?
