IPSEC Site to Site w/StrongSwan

[pavelgl]

@K2DLS

I've found a few references to how to remove the VPN subnets from masquerading

Here's the right way to do it:

https://forum.openwrt.org/t/ipsec-routing-firewall4/127101/6 - #by jow