Hi Ben, > Do you know if the routing rules are required to bind the ike and related > messages to an xfrm device? strongSwan won't install routes for policies that reference XFRM interfaces, see [1]. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-Interfaces-on-Linux