# IPSec setup blues

**URL:** <https://community.ipfire.org/t/ipsec-setup-blues/13382>\
**Category:** IPsec\
**Created:** [29 December 2024 17:17 UTC](https://community.ipfire.org/t/ipsec-setup-blues/13382 "2024-12-29T17:17:30Z")\
**Posts on this page:** 4\
**Page:** 2

<div class="post-metadata">

**Author:** ![sonic](https://community.ipfire.org/user_avatar/community.ipfire.org/sonic/32/14314_2.png) [@sonic](https://community.ipfire.org/u/sonic)\
**Post date:** [31 December 2024 15:47 UTC](https://community.ipfire.org/t/ipsec-setup-blues/13382/21 "2024-12-31T15:47:05Z")

</div>

> [@bonnietwin](#):
>
> Is your laptop running with Windows. I have seen other people on this forum having problems with older versions of windows as their DH groups and ciphers have not been updated from the older vulnerable versions.

It’s Windows 11, updated… It should have proper ciphers.

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [31 December 2024 15:50 UTC](https://community.ipfire.org/t/ipsec-setup-blues/13382/22 "2024-12-31T15:50:25Z")

</div>

> [@sonic](#):
>
> It’s Windows 11, updated… It should have proper ciphers.

I would hope so but it seems to only be asking for MODP-1024.

Maybe show a screenshot of the Advanced WUI page for your IPSec connection so we can see what ciphers, groups etc are selected and would be compared to the ones proposed from your client.

---

<div class="post-metadata">

**Author:** ![sonic](https://community.ipfire.org/user_avatar/community.ipfire.org/sonic/32/14314_2.png) [@sonic](https://community.ipfire.org/u/sonic)\
**Post date:** [31 December 2024 16:11 UTC](https://community.ipfire.org/t/ipsec-setup-blues/13382/23 "2024-12-31T16:11:30Z")

</div>

> 13[CFG] selected proposal: IKE:AES\_GCM\_16\_256/PRF\_HMAC\_SHA2\_512/ECP\_521

Is not that…  
It just fails.

> 07[ENC] generating IKE\_AUTH response 1 [N(AUTH\_FAILED)]

---

<div class="post-metadata">

**Author:** ![jon](https://community.ipfire.org/user_avatar/community.ipfire.org/jon/32/15363_2.png) [@jon](https://community.ipfire.org/u/jon)\
**Post date:** [31 December 2024 17:14 UTC](https://community.ipfire.org/t/ipsec-setup-blues/13382/24 "2024-12-31T17:14:06Z")

</div>

> [@sonic](#):
>
> It’s Windows 11, updated… It should have proper ciphers.

Try these first (see RED box) in the **Advanced** WebGUI page

 ![Screenshot 2024-12-31 at 9.31.36 AM](https://community.ipfire.org/uploads/default/original/2X/1/1454b93636ec0e00800e7f2613db9526c188fd8d.png)

This is from the IPFire Wiki page:  
[https://www.ipfire.org/docs/configuration/services/ipsec/host-to-net/windows](https://www.ipfire.org/docs/configuration/services/ipsec/host-to-net/windows)

[Previous page](https://community.ipfire.org/t/ipsec-setup-blues/13382.md?page=1)