I never established any IPSec tunnels in my life... I always use something else first: openvpn, wireguard, pptp, socks over ssh... they are easier, usually...
@ThoriumBR yup, tinc is my normal goto for always on vpn ... and wireguard / openvpn / shadowsocks are my goto for on-demand when your trying to do stupid shit like sail the 7 seas.
Unfortunately I am trying to connect to another company ... and their firewall supports IPsec and they want to use that >.<
Time to get paid the big bucks and learn something new I guess