diff --git a/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix b/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix
index bcdcfec9fc06..aa99f47acacb 100644
--- a/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix
+++ b/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix
@@ -1353,6 +1353,7 @@ in
         netmask = mkCommaSepListParam [ ] "Address or CIDR subnets";
         server = mkCommaSepListParam [ ] "Address or CIDR subnets";
         subnet = mkCommaSepListParam [ ] "Address or CIDR subnets";
+        p_cscf = mkCommaSepListParam [ ] "Address or CIDR subnets";
         split_include = mkCommaSepListParam [ ] "Address or CIDR subnets";
         split_exclude = mkCommaSepListParam [ ] "Address or CIDR subnets";
       }
diff --git a/pkgs/by-name/st/strongswan/package.nix b/pkgs/by-name/st/strongswan/package.nix
index d8f46ac8f746..b8debe3c96a9 100644
--- a/pkgs/by-name/st/strongswan/package.nix
+++ b/pkgs/by-name/st/strongswan/package.nix
@@ -122,13 +122,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "strongswan";
-  version = "6.0.2"; # Make sure to also update <nixpkgs/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix> when upgrading!
+  version = "6.0.3"; # Make sure to also update <nixpkgs/nixos/modules/services/networking/strongswan-swanctl/swanctl-params.nix> when upgrading!
 
   src = fetchFromGitHub {
     owner = "strongswan";
     repo = "strongswan";
     tag = version;
-    hash = "sha256-wjz41gt+Xu4XJkEXRRVl3b3ryEoEtijeqmfVFoRjnA4=";
+    hash = "sha256-uH6RExDOmrm1LBi0zBrCn+qp2oL522mdshe62UDV8I0=";
   };
 
   patches = [