[strongSwan] KEY_ID encoding

Tobias Brunner tobias at strongswan.org
Tue Sep 15 10:45:59 CEST 2020


Hi Volodymyr,

>  ikev2-cisoasa {
>     remote_addrs = %any
>     local { ... }
>     remote {
>       auth = psk
>       id = @#636973636f617361

This can't work.  The # character is used for comments, so you basically
configured an empty FQDN identity.  Either wrap this string in quotes

     id = "@#636973636f617361"

or use the keyid: prefix

     id = keyid:ciscoasa

Regards,
Tobias


More information about the Users mailing list