diff --git a/backend/src/services/ipsec-config.test.ts b/backend/src/services/ipsec-config.test.ts
index 92a6a28..b7e7020 100644
--- a/backend/src/services/ipsec-config.test.ts
+++ b/backend/src/services/ipsec-config.test.ts
@@ -101,6 +101,10 @@ import { identityRosBody } from "./ipsec-ros.js"
   assert.equal(remote.addr, "vpn.example.com")
   assert.equal(remote.id, "vpn.example.com")
   assert.equal(local.p12, "cDEy")
+  // ike-proposal/esp-proposal не задаём: верхний регистр strongSwan не парсит,
+  // а его defaults совместимы с профилем MikroTik.
+  assert.equal("ike-proposal" in parsed, false)
+  assert.equal("esp-proposal" in parsed, false)
 }
 
 {