On 2024/07/19 10:59, Stuart Henderson wrote:
> I'm trying to bring up a ikev2 tunnel to another organisation who are
> using some Cisco device their side and having some issues when it's
> configured with two child SAs -

Many thanks to someone who replied off-list with some very helpful URLs:

https://quickview.cloudapps.cisco.com/quickview/bug/CSCue42170
https://wiki.strongswan.org/projects/strongswan/wiki/CiscoInteroperability
https://docs.strongswan.org/docs/5.9/interop/fortinet.html