Hi, > unless I'm missing something else I need to add in my configuration. You seem to be using kernel-libipsec [1], don't! Just use kernel-netlink instead. Regards, Tobias [1] https://docs.strongswan.org/docs/5.9/plugins/kernel-libipsec.html