> On both side use this setting: > ike=3des-sha > esp=3des-sha1-96 never mind, it works indeed. Boldly tried it on a system where pluto used to crash and now pluto stays put :) Thanks for taking the time to investigate and sharing the solution. That makes the upgrade path to 2.3.x a bit easier. Albert