>> is it enough knl = 3 ? > > Set it to 2, with 3 your log will only fill up with binary dumps of > kernel messages. You can also use the log settings at [1] so we see a bit more about what's going on. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests