Just stumbled across this in vpnmain.cgi:
     "/etc/ipsec.user-post.conf"

When this file exists, it will be included. So apparently, we were using  
the wrong file (or the documentation is missing that - I don´t know where  
my co-worker got it from).


Lars



On Tue, 19 May 2015 17:07:41 +0200, Heribert Schorn <Schorn(a)t-online.de>  
wrote:

> Hi,
>
> I agree withe Larsen suggestions to have the include als at the bottom.  
> With the include stetment on the top the seteetings of ipsec.user.conf  
> are overwritten and the connection e.g. to IOS or Android will not work  
> following the proposal in the wiki or the forum.
>
> regards
> Heribert