strongswan 客户端报 INTERNAL_ADDRESS_FAILURE notify, no CHILD_SA built

The client needs an internal IP address to use for this tunnel, but your
server does not offer one. Try to assign a virtual IP using the
rightsourceip ipsec.conf option on the gateway.