I switched to Openswan and it worked like a charm at first try (same config), it would be interesting to know why Strongswan doesn't work (it even crashed *ALL* my xen virtual machines). Niccolò