If you don't have any packets sourced from local LAN, destination remote LAN, IPSEC will not be triggered to start negotiating new connection.
Command to log ipsec messages on console:
sudo swanctl --log
You can also check if IKE packets are being sent out / received:
sudo tcpdump -n -v -i <YourWanInterface> udp port 500
