My problem is to block the IPSec traffic to internal devices...
On then device eth1.222 (192.168.222.6) is strongswan listening. It works fine...
This enables rout