Hi ! Meanwhile im a little more far… 
my IPSec NW is 192.168.66.0/24
itemporary i route all thigs through tunnel… but when vpn connection is active…
ip of the phone is 192.168.66.2 … i can ping from both sides and use services via IP from my green net
But… i have no DNS at all at my phone… not regular neither local…
DNS for connection is set to ip of ipfire , i also tried to set it on local connection setting but no success.
also i tried it like here
Ciao Gerd