On Thu, 10 Jan 2019, Antonios Katsouros wrote: Another solution people use is to add: leftupdown="ipsec _updown.netkey --route yes" (if left is your server side) That forces updown to automatically add the route. Paul