Hi Harri, > is there some way to express > > if peercert->OU == develop > pool = pool1 > else > pool = pool2 > You can match identities with wildcards, see [1]. Regards, Tobias [1] https://www.strongswan.org/testing/testresults/ikev2/wildcards/