hi Tobias ,I have added the change in strongswan.confg , but still i am seeing that TLS 1.2 is getting negotiated .Still issue exists .logs :=============ipsec.config