# sep/05/2018 22:53:03 by RouterOS 6.42.7
# software id =
#
#
#
/ip ipsec policy group
add name=logserver
/ip ipsec peer
add address=responder/32 dh-group=ec2n155,modp1024,modp768 enc-algorithm=\
    aes-192,aes-128,3des exchange-mode=ike2 generate-policy=port-override \
    lifetime=10h my-id=user-fqdn:zzz.zzz policy-template-group=logserver \
    secret=atdt880020006000
/ip ipsec policy
add dst-address=192.168.10.0/24 group=logserver src-address=192.168.9.0/24 \
    template=yes
--
strongswan
--
07[IKE] traffic selectors responderip/32 === 192.168.88.19/32 inacceptable
07[IKE] failed to establish CHILD_SA, keeping IKE_SA
07[ENC] generating IKE_AUTH response 1 [ IDr AUTH N(TS_UNACCEPT) ]
07