Hi, > But I see it appear only once with the latter IP/net. Then you either use IKEv1, or your peer narrowed the traffic selectors (due to its configuration or maybe because it only supports a single TS per CHILD_SA), check the log for details. Regards, Tobias