libreswan подключает сайт к vpn

Question

Мне нужно подключиться к vpn с этими требованиями.

      For ISAKMP
AES 256 for key encryption
Hash algorithm of SHA-256 for data integrity
Diffie-Hellman group 14
Preshared keys
Aggressive mode turned off
Lifetime 86400

For IPSEC
ESP-AES 256 for encryption and data integrity
Hash algorithm of ESP-SHA-256 for data integrity
No compression
Lifetime of 3600 seconds with a volume limit of 4,608,000 kilobytes 
VPN address 0.1.2.3
No PFS
IKEv2
Subnet 1.1.1.1/25

Мой файл ipsec.d / connection.conf:

      conn tunnel
     type=tunnel
     auth=secret
     left=[nat'd ip address]
     leftid=[left public ip]
     right=[remote ip address]
     rightsubnet=[subnet provided]
     ike=aes256-sha256;modp2048
     esp=aes256-sha256
     ikelifetime=86400s
     salifetime=3600s
     aggressive=no
     ikev2=insist
     compress=no
     pfs=no

Соответствуют ли мои настройки pfs, сжатия, ikev2, агрессивных, особенно ike и esp указанным выше параметрам?

Я получаю сообщение об ошибке ниже.

      discarding duplicate IKE PRF algorithm HMAC_SHA2_256
ignoring ESP DH algorithm MODP2048 as PFS policy is disabled
added IKEv2 connection
initiating IKEv2 connection
sent IKE_SA_INIT request
dropping unexpected IKE_SA_INIT message containing NO_PROPOSAL_CHOSEN notification; message payloads: N; missing payloads: SA,KE,Ni