Description |
This article describes how to use local-ID type IP addresses other than the IP addresses configured in the interface for IPsec VPN. |
Scope |
FortiGate v7.0 and above. |
Solution |
Starting FortiGate v7.0, it is possible now to set the local ID IP address that is not configured in the interface selected.
Local ID can be used in aggressive mode. It may have up to 63 characters that are used in regular expressions.
Local ID is an extra piece of data delivered during phase 1 of negotiation; the remote side may be set up to check for a particular ID to permit connection.
From CLI:
config vpn ipsec phase1-interface edit <phase1_name> set localid-type address set localid <IP address> end
It mentions an IP address instead of reference x.x.x.x.
Related articles: Technical Tip: Use of PeerID and LocalID in IPsec VPN between two FortiGates |