The freeswan-1.99.ebuild uses the X509 patch version 0.9.15, which is buggy. When you set up ipsec vpns, it complains about ipsec_ebuild contains ":" in a non-ipv6 address. To fix this problem, I changed the line X509_PATCH=0.9.15 to X509_PATCH=0.9.34 0.9.34 is the latest released x509 patch from strongsec.com Thanks
Fixed.