[strongSwan] had to manually up a connection

[Tobias Brunner]

Hi Victor,

> I'd like to understand why.

Then read the log.  What's definitely missing from your config is
`keyingtries=%forever`.  And there could have been a fatal error, after
which no further attempts will be made at all.  Also, using `auto=route`
(with `dpdaction=clear`) would also recreate the SA if matching traffic
occurs.

Regards,
Tobias