NameLess2 @NameLess2

Как можно исправить проблему с подключением к VPN IKEv2(strongswan ubuntu) с роутера Zyxel?

Есть рабочий VPN, при подключении через роутер в логах(вырезка из syslog ниже) он вроде как всю авторизацию проходит и останавливается на создании тунеля. Прогуглил, много чего попробовал ничего не работает, может кто то подскажет как можно исправить.

Aug 13 14:00:20 ipsec[1250]: 14[ENC] parsed IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ]
Aug 13 14:00:20 ipsec[1250]: 14[ENC] generating IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ]
Aug 13 14:00:20 ipsec[1250]: 14[NET] sending packet: from 0.0.0.0[4500] to *.*.*.*[4500] (140 bytes)
Aug 13 14:00:20 ipsec[1250]: 07[NET] received packet: from *.*.*.*[4500] to 0.0.0.0[4500] (76 bytes)
Aug 13 14:00:20 ipsec[1250]: 07[ENC] parsed IKE_AUTH request 4 [ EAP/RES/MSCHAPV2 ]
Aug 13 14:00:20 ipsec[1250]: 07[IKE] EAP method EAP_MSCHAPV2 succeeded, MSK established
Aug 13 14:00:20 ipsec[1250]: 07[ENC] generating IKE_AUTH response 4 [ EAP/SUCC ]
Aug 13 14:00:20 ipsec[1250]: 07[NET] sending packet: from 0.0.0.0[4500] to *.*.*.*[4500] (76 bytes)
Aug 13 14:00:20 ipsec[1250]: 09[NET] received packet: from *.*.*.*[4500] to 0.0.0.0[4500] (92 bytes)
Aug 13 14:00:20 ipsec[1250]: 09[ENC] parsed IKE_AUTH request 5 [ AUTH ]
Aug 13 14:00:20 ipsec[1250]: 09[IKE] authentication of 'usg_flex_200_BCCF4FF17EBA' with EAP successful
Aug 13 14:00:20 ipsec[1250]: 09[IKE] authentication of '0.0.0.0' (myself) with EAP
Aug 13 14:00:20 ipsec[1250]: 09[IKE] IKE_SA ikev2-vpn[25] established between 0.0.0.0[0.0.0.0]...*.*.*.*[usg_flex_200_BCCF4FF17EBA]
Aug 13 14:00:20 ipsec[1250]: 09[IKE] expected a virtual IP request, sending FAILED_CP_REQUIRED
Aug 13 14:00:20 ipsec[1250]: 09[IKE] traffic selectors 172.16.0.0/32 === 192.168.1.0/24 unacceptable
Aug 13 14:00:20 ipsec[1250]: 09[IKE] failed to establish CHILD_SA, keeping IKE_SA
Aug 13 14:00:20 ipsec[1250]: 09[ENC] generating IKE_AUTH response 5 [ AUTH N(FAIL_CP_REQ) N(TS_UNACCEPT) ]

Конфиг

config setup
    charondebug="ike 1, knl 1, cfg 0"
    uniqueids=no

conn ikev2-vpn
    auto=add
    compress=no
    type=tunnel
    keyexchange=ikev2
    fragmentation=yes
    forceencaps=yes
    dpdaction=clear
    dpddelay=300s
    rekey=no
    left=%any
    leftsourceip=%config
    leftid=@0.0.0.0
    leftcert=server-cert.pem
    leftsendcert=always
    leftsubnet=0.0.0.0/0
    right=%any
    rightid=%any
    rightauth=eap-mschapv2
    rightsourceip=172.16.0.0/12
    rightdns=172.17.0.7,8.8.8.8
    rightsendcert=never
    eap_identity=%identity
    ike=chacha20poly1305-sha512-curve25519-prfsha512,aes256gcm16-sha384-prfsha384-ecp384,aes256-sha1-modp1024,aes128-sha1-modp1024,3des-sha1-modp1024,aes256-sha512-modp1024!
    esp=chacha20poly1305-sha512,aes256gcm16-ecp384,aes256-sha256,aes256-sha1,3des-sha1,aes256-sha512!