Agressive mode off: router:~# ipsec whack --name sonicwall --initiate 002 "sonicwall" #1: initiating Main Mode 104 "sonicwall" #1: STATE_MAIN_I1: initiate 010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 20s for response 010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 40s for response Agressive mode on: router:~# ipsec whack --name sonicwall --initiate 003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used. 003 "sonicwall" #1: transform (5,2,2,0) ignored. 003 "sonicwall" #1: transform (7,1,2,0) ignored. 003 "sonicwall" #1: transform (7,2,2,0) ignored. 002 "sonicwall" #1: initiating Aggressive Mode #1, connection "sonicwall" 003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used. 003 "sonicwall" #1: transform (5,2,2,0) ignored. 003 "sonicwall" #1: transform (7,1,2,0) ignored. 003 "sonicwall" #1: transform (7,2,2,0) ignored. 112 "sonicwall" #1: STATE_AGGR_I1: initiate Status: 000 "sonicwall": X.X.X.X[@XXXXX,XC+S=C]...X.X.X.X[@XXXXXXXXXXX,XS+S=C]===192.168.16.11/32; unrouted; eroute owner: #0 000 "sonicwall": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown; 000 "sonicwall": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0 000 "sonicwall": policy: PSK+ENCRYPT+TUNNEL+UP+AGGRESSIVE; prio: 32,32; interface: eth-public; 000 "sonicwall": newest ISAKMP SA: #0; newest IPsec SA: #0; 000 "sonicwall": IKE algorithms wanted: 5_000-1-2, 5_000-2-2, 7_000-1-2, 7_000-2-2, flags=strict 000 "sonicwall": IKE algorithms found: 5_192-1_128-2, 5_192-2_160-2, 7_128-1_128-2, 7_128-2_160-2, 000 "sonicwall": ESP algorithms wanted: 3_000-2, flags=strict 000 "sonicwall": ESP algorithms loaded: 3_000-2, flags=strict