<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div>
<div id="appendonsend" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I ran into a very similar problem with this version and the fix was to change auto=start to auto=add and then start the connection from a script with 'ipsec auto --start my-conn' at the end of my boot process.
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I ran into DIFFERENT problems after that, but that's a separate issue. <span id="🙂">
🙂</span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://lists.libreswan.org/pipermail/swan/2018/002532.html" id="LPlnk715696">https://lists.libreswan.org/pipermail/swan/2018/002532.html</a><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
HTH,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Scott<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Swan <swan-bounces@lists.libreswan.org> on behalf of Bo Osmann Erichsen <boe@mentor-it.dk><br>
<b>Sent:</b> September 30, 2020 8:12 AM<br>
<b>To:</b> swan@lists.libreswan.org <swan@lists.libreswan.org><br>
<b>Subject:</b> Re: [Swan] left=%defaultroute and right=my.dns.name does not work.</font>
<div> </div>
</div>
<div style="word-wrap:break-word" lang="DA">
<div class="x_WordSection1">
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">Hi guys<br>
ipsec version:<br>
Linux Libreswan 3.23 (netkey) on 4.15.0-64-generic</span><span lang="EN-US"></span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">I get the following issue when i have the following configuration file:</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US">conn FortigateIPSEC</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> keyexchange=ike</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> ike="aes256-sha256-modp2048"</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> esp="aes256-sha256-modp2048"</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> leftcert="<removed>"</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> leftsendcert=always</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> leftrsasigkey=%cert
</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> leftid=%fromcert</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> left=%defaultroute</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> leftnexthop=%defaultroute</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> type=tunnel</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> pfs=yes</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> aggressive=yes</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> ikev2=yes</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> right=domain-name-of-my-firewall</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> rightsubnet=x.x.x.x/x</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> rightid=%fromcert</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> rightrsasigkey=%cert</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> auto = start</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;background:#F6F8FA">
<span style="font-size:9.0pt; font-family:Consolas; color:#24292E; border:none windowtext 1.0pt; padding:0cm" lang="EN-US"> salifetime = 43200</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US"> </span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">The issue is with:
</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">left=%defaultroute<br>
right=the-real-domain-name-of-my-firewall</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;margin-bottom:12.0pt">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">Sep 30 10:07:19 gns3 pluto[24775]: "FortigateIPSEC": We cannot identify ourselves with either end of this conne<br>
ction. 2xx.1xx.2xx.1xx or 0.0.0.0 are not usable<br>
<i>I obscured the ip address for privacy</i></span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 12pt; font-family: "Calibri", sans-serif;">
<span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif; color:#24292E" lang="EN-US">It works if i replace the domain name with the ipv4 address. The domain name resolves correctly.</span></p>
</div>
</div>
</div>
</body>
</html>