Tested in:
VyOS 1.2.8
VyOS 1.3-beta-202112120443
There is a limit of 10 proposals per IKE group:
VPN configuration error: A total of 13 proposals have been configured for IKE group "IKEv1gr". The maximum proposals allowed for an IKE group is 10
To reproduce:
set vpn ipsec ike-group IKEv1gr ikev2-reauth 'no' set vpn ipsec ike-group IKEv1gr key-exchange 'ikev1' set vpn ipsec ike-group IKEv1gr lifetime '86400' set vpn ipsec ike-group IKEv1gr proposal 100 encryption 'aes256' set vpn ipsec ike-group IKEv1gr proposal 100 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 100 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 1000 encryption '3des' set vpn ipsec ike-group IKEv1gr proposal 1000 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 1000 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 1100 encryption '3des' set vpn ipsec ike-group IKEv1gr proposal 1100 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 1100 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 1200 encryption '3des' set vpn ipsec ike-group IKEv1gr proposal 1200 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 1200 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 200 encryption 'aes256' set vpn ipsec ike-group IKEv1gr proposal 200 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 200 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 300 encryption 'aes256' set vpn ipsec ike-group IKEv1gr proposal 300 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 300 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 400 encryption 'aes192' set vpn ipsec ike-group IKEv1gr proposal 400 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 400 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 500 encryption 'aes192' set vpn ipsec ike-group IKEv1gr proposal 500 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 500 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 600 encryption 'aes192' set vpn ipsec ike-group IKEv1gr proposal 600 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 600 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 700 encryption 'aes128' set vpn ipsec ike-group IKEv1gr proposal 700 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 700 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 800 encryption 'aes128' set vpn ipsec ike-group IKEv1gr proposal 800 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 800 dh-group '2' set vpn ipsec ike-group IKEv1gr proposal 900 encryption 'aes128' set vpn ipsec ike-group IKEv1gr proposal 900 hash 'sha1' set vpn ipsec ike-group IKEv1gr proposal 900 dh-group '2' commit