我如何解决“错误13843：收到无效的有效负载。”？

当Windows 8尝试连接到我的Strongswan VPN时出现以下错误，

错误13843：收到无效的有效负载。

我不知道如何解决它或是什么原因造成的。 我的charon日志有这个，

15[IKE] IKE_SA roadwarrior[2] established between 10.0.10.81[DNREDACTED1]...75.108.226.117[DNREDACTED2] 15[IKE] scheduling reauthentication in 9771s 15[IKE] maximum IKE_SA lifetime 10311s 15[IKE] sending end entity cert "REDACTED GW CERT" 15[IKE] peer requested virtual IP %any 15[IKE] no virtual IP found, sending INTERNAL_ADDRESS_FAILURE 15[IKE] configuration payload negotiation failed, no CHILD_SA built 15[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH N(AUTH_LFT) N(MOBIKE_SUP) N(NO_ADD_ADDR) N(INT_ADDR_FAIL) ] 15[NET] sending packet: from 10.0.10.81[4500] to 75.108.226.117[4500] 16[NET] received packet: from 75.108.226.117[4500] to 10.0.10.81[4500] 16[ENC] parsed INFORMATIONAL request 2 [ D ] 16[IKE] received DELETE for IKE_SA roadwarrior[2] 16[IKE] deleting IKE_SA roadwarrior[2] between 10.0.10.81[DNREDACTED1]...75.108.226.117[DNREDACTED2] 16[IKE] IKE_SA deleted 16[ENC] generating INFORMATIONAL response 2 [ ] 16[NET] sending packet: from 10.0.10.81[4500] to 75.108.226.117[4500] 

ipsec.conf文件

• 有没有办法使用StrongSwan IPSec来validationXAuth的外部程序？
• OS X 10.10到StrongSwan VPN
• IKEV2configuration文件IP池
• 与strongswan的公钥authentication
• strongSwan ipsec设置，几个问题

 conn %default dpdaction=clear dpddelay=300s keyexchange=ikev2 auto=add conn roadwarrior keyexchange=ikev2 auto=add left=%defaultroute leftcert=gw-cert.pem leftsubnet=10.0.10.0/24 right=%any rightsubnet=192.168.1.1/24 

strongswan.conf

 charon { threads = 16; # Two defined file loggers. Each subsection is either a file # in the filesystem or one of: stdout, stderr. filelog { /var/log/charon.log { # add a timestamp prefix time_format = %b %e %T # loggers to files also accept the append option to open files in # append mode at startup (default is yes) append = no # the default loglevel for all daemon subsystems (defaults to 1). default = 1 # flush each line to disk flush_line = yes } stderr { # more detailed loglevel for a specific subsystem, overriding the # default loglevel. ike = 2 knl = 3 # prepend connection name, simplifies grepping ike_name = yes } } # And two loggers using syslog. The subsections define the facility to log # to, currently one of: daemon, auth. syslog { # optional identifier used with openlog(3), prepended to each log message # by syslog. if not configured, openlog(3) is not called, so the value will # depend on system defaults (usually the program name) identifier = charon-custom # default level to the LOG_DAEMON facility daemon { } # very minimalistic IKE auditing logs to LOG_AUTHPRIV auth { default = -1 ike = 0 } } dns1=4.2.2.1 dns2=4.2.2.2 }