strongSwan

I have several net-to-net and host-to-net tunnel-esp-connections in use with fixed reqids and fixed iptables-rules related to the connections.
After updating strongSwan from version 5.2.2 to 5.3.0, I reognized that I can't reach hosts on the other sites, while the SA are established. While analyzing the problem, I see that the reqid settings in ipsec.conf are ignored and the SA uses reqids incremented form one beginning and make my iptables-rules useless.

Is this related to the new global CHILD_SA reqid allocation mechanism? Is there any workaround?
 
 
With kind Regards

Ralf
 
 
 
Here is a cutout of my config from one site:

config setup

strictcrlpolicy=yes
cachecrls=no

conn %default

ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=%forever
keyexchange=ikev2
compress=no
dpdaction=clear
ike=aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha512-ecp512bp!
esp=aes256-sha1,aes256-sha256-modp1024,aes256-sha512-ecp512bp!
left=PUBLIC_IP
leftcert=SITE_A.pem
leftid="SITE_A"

conn siteB

leftsubnet=PUBLIC_IP/32,192.168.3.0/24,192.168.10.0/24
right=%any
rightid="SITE_B"
rightsubnet=192.168.6.0/24,192.168.8.220/32
reqid=42
auto=add