On ER, your esp group (=phase 2 settings) lacks dh-group setting, whereas on watchguard it's set to dh2
set vpn ipsec esp-group FOO0 pfs dh-group2
On ER, your esp group (=phase 2 settings) lacks dh-group setting, whereas on watchguard it's set to dh2
set vpn ipsec esp-group FOO0 pfs dh-group2