I can't establish an IPSEC VPN from ros 6.25 to the new pfSense 2.2 (StrongSwan)

"error failed to pre-process ph2 packet."

The paramter seem to be equal

22:13:29 ipsec,debug,packet IDci matches proposal.
22:13:29 ipsec,debug,packet IDcr prefix/ulproto does not match proposal.
22:13:29 ipsec,error failed to pre-process ph2 packet.
22:13:29 ipsec,error failed to pre-process ph2 packet.
22:13:29 ipsec,debug,packet compute IV for phase2
22:13:29 ipsec,debug,packet phase1 last IV:

What is "IDcr" ?

Any ideas are welcome

Found a solution ... - The PSK has a "!" in it. Changing to only alphanumeric helps. But a "!" shoukd be allowed I think?

I've got this same error trying to establish an IPSEC from ROS 6.27 to strongswan 5.2.1 (linux debian).