OPNsense Forum

English Forums => Virtual private networks => Topic started by: DoughtCom on May 12, 2021, 05:14:03 PM

Title: IPsec-IKEV2 VPN "unable to resolve %any, initiate aborted"
Post by: DoughtCom on May 12, 2021, 05:14:03 PM
After some googling, I found very few forum posts for "strongswan" which is what opnsense uses for IPsec.  However I'm not aware if any of it applies to the situation.  I searched on here before posting as well, with no luck.

I have a site-site tunnel working on this install with IPsec currently "con1" and everything is working great.  I followed the steps to create a second VPN IPsec tunnel as I have on other opnsense setups, however on the "Status Overview" screen the VPN (con2) has an orange play button. 

After I noticed that I started looking into the logs to find the lines that exist after trying to press the play button:
12[MGR] <con2|12> tride to checkin and delete nonexistent IKE_SA
12[IKE] <con2|12> unable to resolve %any, initiate aborted
12[CFG] received stroke: initiate 'con2'

I have tried recreating the VPN tunnel Phase 1 and Phase 2 with the same results.  I'm hoping someone may be able to point me in the right direction to resolve the issue.

Cheers,
-Shawn
Title: Re: IPsec-IKEV2 VPN "unable to resolve %any, initiate aborted"
Post by: bootsie123 on April 18, 2022, 02:13:47 AM
Hi! Did you ever get this to work? I've been following this guide here (https://docs.opnsense.org/manual/how-tos/ipsec-road.html (https://docs.opnsense.org/manual/how-tos/ipsec-road.html)) and have been running into the same issue...