Hi Manju, > Are the trap-policies, some configuration or settings. Anything specific > to child-sas we need to set? Please refer to [1] (basically auto=route in ipsec.conf or start_action=trap in swanctl.conf). Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/IntroductionTostrongSwan#Invocation-and-Maintenance