On Thu, 8 May 2014, Nick Howitt wrote: > Regards your comment about addconn, I don't follow the relevance. I am only using addconn for debugging. I normally just start ipsec ot > use "ipsec auto --replace conn". This always worked in Openswan without leftnexthop but fails in Libreswan. ipsec auto is a wrapper to addconn. Paul