Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Domain names as identifier yields some errors

    Scheduled Pinned Locked Moved IPsec
    3 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • 0
      0tt0
      last edited by

      When I in 'Mobile clients' set 'my identifier' to 'Dynamic DNS' end enter some domain in box and thereafter press Save and revisits the page the box  shows 'IP address' with an empty box to the right instead.

      Is this somehow correct, it looks like it's not using my input.

      In log I see stuff like:

      racoon: ERROR: fatal parse failure (2 errors)
      racoon: ERROR: /var/etc/racoon.conf:11: """ syntax error
      racoon: ERROR: config reload failed

      If I enter 'domain name' and the domain in questions (which happen to be dynamically updated) I now get this instead:

      racoon: ERROR: parse error is nothing, but yyerrorcount is 2.

      I'm actually also having problems getting a connection through with Shrew using http://doc.pfsense.org/index.php/IPsec_Road_Warrior/Mobile_Client_How-To, I see repeated:

      racoon: ERROR: couldn't find the pskey for

      in log.

      I'll try to test various settings foerthat, this post was mostly targeted towards the domain/dynamic domain error.

      As a general note I see that since there are so many settings in various server/client GUIs there's always some tiny peace if info that's missing or changed when following guides and how-tos, but that's just the way it is with IPSec I guess.

      TIA,

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Are you putting in just a domain name, for example "example.com" or a FQDN, like "remoteuser.example.com"?

        IIRC, you need the FQDN, not just a domain name. Either way, the input validation probably needs to check for that if it's required.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • 0
          0tt0
          last edited by

          I think it may have been just the domain name, have been trying varous settgins back and forth though. Will try to not use only domain name then and see if that does it.

          Thanx,

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.