This also effects Neutron VPNaaS (neutron-vpn-agent) - preventing VPNaaS from working with strongswan on Xenial. flags=(attach_disconnected) on /usr/lib/ipsec/stroke appears to resolve the issue.
This also effects Neutron VPNaaS (neutron-vpn-agent) - preventing VPNaaS from working with strongswan on Xenial. flags=( attach_ disconnected) on /usr/lib/ ipsec/stroke appears to resolve the issue.