[strongSwan] IDir does not match to

Martin Willi martin at strongswan.org
Wed Feb 6 10:12:48 CET 2013


Hi Andrew,

> IDir '165.228.92.xx' does not match to '165.228.92.xx'

This usually means the the peer identifies itself as '165.228.92.xx',
but you have configured and are expecting an identity of
'165.228.92.xx'. The daemon sees a difference between these identities,
and hence rejects this connection attempt for this configuration.

In the log these identities look equal, but this does not necessarily
mean they are. IKE identities use a specific type, and a ID_IPV4 does
not match a ID_FQDN type. Is there a way to specify the ID type on the
Cisco device? strongSwan most likely uses ID_IPV4 in this configuration.

Regards
Martin





More information about the Users mailing list