Hi Sasha,
However, this example and all discussion of such scenarios I have found uses the legacy ipsec.conf config. Have I somehow misinterpreted how to implement this scenario using the modern swanctl.conf configuration?
Possibly, who can say without configs or logs [1]. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests
