The cool thing with OpenBSD having a few way to do ipsec (ipsec standalone, ipsec + l2tp and iked/ikev2) is that you can avoid debugging things and just try something else :D