sha2-truncbug=yes delete this in your ipsec config, and it worked. I use libreswan+xl2tpd