[strongSwan] Android VPN Client - no matching outbound IPsec policy

[Tobias Brunner]

Hi

> I suspect the configuration is wrong on the server, but I have not 
> found what prevents the client from installing a policy for traffic 
> through the tunnel.

Correct, parts of your configuration seem to originate from an
IKEv1/IPsec/L2TP connection because due to

> leftprotoport=17/1701
> rightprotoport=17/%any

your traffic selector is narrowed to UDP === UDP:1701(L2TP).

Removing these options should fix the problem.

Regards,
Tobias