Hi Luke, Have you set `uniqueids=never` [1]? Otherwise, any existing SA with the same client ID is terminated and the virtual IP gets released and reassigned on the new SA. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/ConfigSetupSection