无法从Linux（Ubuntu）连接到SonicWall VPN

我试图从Linux（Ubuntu）使用StrongSwan连接到SonicWall VPN。 我可以使用使用共享密钥的SonicWall全球VPN客户端从Windows计算机进行连接。 以下是使用该客户端进行连接的说明： MC21-哥伦比亚

在Linux中，我会使用StrongSwan：

local> ipsec --version Linux strongSwan U5.3.5/K4.4.0-72-generic Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil, Switzerland 

我的/etc/ipsec.conf如下

 conn name-for-connection right=201.xxx.yyy.zzz,201.aaa.bbb.ccc rightsubnet=172.16.0.0/12 rightid=@place_id left=%any xauth_identity=myuser keyexchange=ikev2 authby=psk ike=aes256-sha1-modp2048 esp=aes256-sha1-modp2048 auto=start 

和/etc/ipsec.secret有条目：

• 发出删除逻辑卷 – 无法删除打开的逻辑卷“XXX_rootimg”，尽pipe它没有打开
• 虚拟Ubuntu gparted增加根分区大小
• NFSv4服务器绑定导出
• Powershell – 检查文件是否是Linux符号链接
• ssh错误：权限被拒绝（键盘交互）

 @place_id : PSK "Sh4r3d53cr37" myuser : XAUTH "mYp455w0rd" 

当运行命令sudo ipsec up name-for-connection我得到以下输出：

 initiating IKE_SA name-for-connection[3] to 201.xxx.yyy.zzz generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ] sending packet: from 192.168.0.eee[500] to 201.xxx.yyy.zzz[500] (1460 bytes) received packet: from 201.xxx.yyy.zzz[500] to 192.168.0.eee[500] (38 bytes) parsed IKE_SA_INIT response 0 [ N(INVAL_KE) ] peer didn't accept DH group MODP_2048, it requested MODP_1024 initiating IKE_SA name-for-connection[3] to 201.xxx.yyy.zzz generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ] sending packet: from 192.168.0.eee[500] to 201.xxx.yyy.zzz[500] (1332 bytes) received packet: from 201.xxx.yyy.zzz[500] to 192.168.0.eee[500] (317 bytes) parsed IKE_SA_INIT response 0 [ SA KE No CERTREQ N(NATD_S_IP) N(NATD_D_IP) V ] local host is behind NAT, sending keep alives sending cert request for "C=NL, O=Example Company, CN=strongSwan Root CA" no IDi configured, fall back on IP address authentication of '192.168.0.eee' (myself) with pre-shared key establishing CHILD_SA name-for-connection generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(EAP_ONLY) ] sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) retransmit 1 of request with message ID 1 sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) retransmit 2 of request with message ID 1 sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) retransmit 3 of request with message ID 1 sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) sending keep alive to 201.xxx.yyy.zzz[4500] retransmit 4 of request with message ID 1 sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) sending keep alive to 201.xxx.yyy.zzz[4500] sending keep alive to 201.xxx.yyy.zzz[4500] retransmit 5 of request with message ID 1 sending packet: from 192.168.0.eee[4500] to 201.xxx.yyy.zzz[4500] (372 bytes) sending keep alive to 201.xxx.yyy.zzz[4500] sending keep alive to 201.xxx.yyy.zzz[4500] sending keep alive to 201.xxx.yyy.zzz[4500] giving up after 5 retransmits peer not responding, trying again (2/3) establishing connection 'name-to-connection' failed 

那么，我该如何debugging这个连接或者如何build立呢？