After typing rcommand
ipsec restart there is an error message about deprecated command:
root@gw-ireland-1c:~# ipsec restart Stopping strongSwan IPsec... Starting strongSwan 5.5.1 IPsec [starter]... # deprecated keyword 'interfaces' in config setup ### 1 parsing error (0 fatal) ###
Solution is very simple, we just need to remove deprecated lines in /etc/ipsec.conf created by
/opt/vyatta/sbin/vpn-config.pl
# generated by /opt/vyatta/sbin/vpn-config.pl #config setup # interfaces="%none"
I didn't find a notice about deprecation of this command, but there is no mention about command "interface" in "config setup" part which is more important i suppose.
https://wiki.strongswan.org/projects/strongswan/wiki/ConfigSetupSection