Hi, > How I can change leftid for strongswan? It always CN=123.123.123.123 no > matter what I configure in ipsec.conf, even leftid=%any doesn't work. You need to include that IP address (or alternatively a hostname) as subjectAltName extension in the certificate. Regards, Tobias