On Wed, 12 Jun 2013, Andrew Campbell wrote: > It doesn't like the remote servers ID_FQDN reply of '@IPsec_1.cisco.com' > > Would openswan/libreswan try to resolve the IP address form the ID_FQDN reply? No, that should be fine. Does your right= specifiy an IP? Paul