[Swan] Windows 10 client to libreswan VPN server: CHILD SA: no local proposal matches remote proposals

[Mirsad Goran Todorovac]

On 1/6/2022 4:02 PM, Paul Wouters wrote:

> On Wed, 5 Jan 2022, Mirsad Goran Todorovac wrote:
>
>> If I am allowed, I could also assert that I have been positively 
>> surprised by the positive change in speed with IKEv2 VPN: while IKEv1 
>> L2TP over IPSec scored about 50 Mbps download on our server, the 
>> IKEv2 showed 138 Mbps in Ookla speedtest benchmark :) , over the 
>> Faculty's 1 Gbps link and my 150 Mbps home connection.
>
> That's because most likely your l2tp layer went through userland xl2tpd.
> it can be configured to use kernel l2tp.ko but that usually has issues.
> So yes, I'm not surprised :)

Even better, on a faster link it did 250/210 Mbps. :)

Mirsad

--
Mirsad Goran Todorovac
CARNet sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu
-- 
CARNet system engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb, Republic of Croatia
tel. +385 (0)1 3711 451
mob. +385 91 57 88 355