Wake On LAN (WOL) with magic packet over IPSEC VPN

[w0w]

I have configured IPSEC with strongswan between my pfsense box and android client, all works fine except sending WOL packets into LAN. Ping works, and I have created rules for ICMP and UDP traffic to bypass magic packets. Once it worked and never again, what am I doing wrong?
BTW I don't see any blocked packets in firewall log. And I can wake up the LAN PC from pfsense WOL service

[georgeman]

Consider you should be sending the magic packets to the the broadcast address of the subnet (so you make sure it is put on every wire and the NIC receives it). Sending directly to the IP you want to wake up usually does not work because the ARP cache entry is most certainly cleared by the time you want to wake the PC up