Comment 2 for bug 1357098

@Joe, as mentioned by Robie, the ESP packets are generated by your kernel using the key information provided and negociated by Strongswan. There can be many reasons for the remote node to not reply to your ESP packets. Most of the time, IPsec issues boil down to configuration/setup problems.

Assuming you are still affected by this problem, could you better describe your setup by including the IP addresses involved as well as the configuration files from both sides? If you obfuscate the IPs, please keep the first digits intact to ease debugging. Please also include "iptables -nvL" from both sides as this could well be a firewall issue.