Trouble routing traffic for OS X 10.11 IKEv2 client

[mwp821]

Hi everyone,

I followed this guide to a "T" (including setting the local network to 0.0.0.0/0) and configured an OS X 10.11 client. I can connect and everything seems hunky dory but something is amiss with either my routing table or the firewall rules. I can't reach the internet, and connections to intranet hosts seem limited to ports 22 and 80, which leads me to believe that the anti-lockout rule is applying but not the pass-all IPSec rule.

Any suggestions? Thanks in advance. :)