<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:3.0cm 2.0cm 3.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="DA" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">Hi guys<br>
ipsec version:<br>
Linux Libreswan 3.23 (netkey) on 4.15.0-64-generic</span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">I get the following issue when i have the following configuration file:</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA">conn FortigateIPSEC</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> keyexchange=ike</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> ike="aes256-sha256-modp2048"</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> esp="aes256-sha256-modp2048"</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> leftcert="<removed>"</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> leftsendcert=always</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> leftrsasigkey=%cert
</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> leftid=%fromcert</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> left=%defaultroute</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> leftnexthop=%defaultroute</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> type=tunnel</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> pfs=yes</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> aggressive=yes</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> ikev2=yes</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> right=domain-name-of-my-firewall</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> rightsubnet=x.x.x.x/x</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> rightid=%fromcert</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> rightrsasigkey=%cert</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> auto = start</span><o:p></o:p></p>
<p class="MsoNormal" style="background:#F6F8FA"><span lang="EN-US" style="font-size:9.0pt;font-family:Consolas;color:#24292E;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:DA"> salifetime = 43200</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">The issue is with:
</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">left=%defaultroute<br>
right=the-real-domain-name-of-my-firewall</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">Sep 30 10:07:19 gns3 pluto[24775]: "FortigateIPSEC": We cannot identify ourselves with either
end of this conne<br>
ction. 2xx.1xx.2xx.1xx or 0.0.0.0 are not usable<br>
<i>I obscured the ip address for privacy</i></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#24292E;mso-fareast-language:DA">It works if i replace the domain name with the ipv4 address. The domain name resolves
correctly.</span><o:p></o:p></p>
</div>
</body>
</html>