Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs?

[AllwynMascarenhas]

Hi,

In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel .. 

So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has come up. 

[BPry]

@AllwynMascarenhas,

The Local ID and the Peer ID on a tunnel just need to match when received, it doesn't actually matter at all what they're set to. If the Fortigate is sending a private ID that's perfectly fine as long as that's what the firewall is expecting to receive.