I have digi WR31s with the same problem, is there a way to manually force the tunnel up?

Similar issue as the user with the WR21: I have WR31s connecting via IPSec to a strongswan IPSec server having identical settings (except interface IP info) and some work but others don’t. The ones which do not work do not generate any traffic to the strongswan server and have no IKE messages in their logs. Sometimes factory resetting the devices then reconfiguring them will get them back.