Hi, > Can you give me the tips - where is the root of the problem - server, > client or strongswan ? Some routers/firewalls may drop IP fragments. To avoid fragments on the IP layer you could try enabling IKE fragmentation with fragmentation=yes in your config. Regards, Tobias