Hello everyone! I have set up an IKEv2 IPsec VPN on an RB962UiGS-5HacT2HnT using StrongSwan as a client on Android without split tunneling, so all traffic over the Internet goes through the tunnel. The VPN is established successfully and I can see the traffic flowing both ways (I can see connections on the firewall page, and the counter increment on the ipsec SA) but on the Android side the browsing takes forever almost like there is no connection, the strange thing is that when I run a packet capture on the router the connection starts to work on the android device. Has anyone experienced this? Any tips or anything I should enable on the router?
Thanks!
Best regards.
After some research i found out that the issue was the fasttrack feature, I put the vpn pool as ! dst. address list in the rule that marks the connection to fasttrack and that did the trick.