topic Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs? in General Topics

Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs?

AllwynMascarenhas — Tue, 02 Nov 2021 09:10:14 GMT

Hi,

In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel ..

So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has come up.

Re: Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs?

BPry — Tue, 02 Nov 2021 23:59:21 GMT

@AllwynMascarenhas,

The Local ID and the Peer ID on a tunnel just need to match when received, it doesn't actually matter at all what they're set to. If the Fortigate is sending a private ID that's perfectly fine as long as that's what the firewall is expecting to receive.