Hello Noel, > The virtual IPs for the clients are chosen from the rightsubnet option. But I should remove the rightsubnet option, shouldn´t I? How is this gonna work then? > What version of strongSwan are you using? strongSwan U5.3.2/K3.14.43-ipfire-pae Lars