Hello everyone,

I have several VPN tunnels between OBSD 3.8 systems (LAN to LAN via
VPN). These all have fixed IP addresses and all works
fine  :-) . However, now I have a OBSD 3.8 system that gets a Dynamic IP
address. I mapped that address to a hostname using DynDNS.org
Using ipcheck.py (a python program) it keeps the DynDns.org DNS servers
up-to-date when a IP change occurs. So far, so good.

I was hoping to  " simply "  use the DynDns host name in the IPSEC.CONF
file, but that doesnt seem to work :-(( .
For this mail I changed the name to "remote5.dyndns.org". The "real"
name pings ok can  Ii can use it to SSH into the machine.

#
# IPSEC to remote location 5
# Active host, remote location is passive
#
ike esp from 172.17.0.0/16  to 192.168.76.0/22 peer remote5.dyndns.org
ike esp from <openbsd ip>  to 192.168.76.0/22 peer remote5.dyndns.org
ike esp from <openbsd ip>  to remote5.dyndns.org

Note the "remote5.dyndns.org" instead of a IP address.

When I load this config file I get :

# ipsecctl -f /etc/ipsec.conf

/etc/ipsec.conf: 46: could not parse host specification
/etc/ipsec.conf: 47: could not parse host specification
/etc/ipsec.conf: 48: could not parse host specification
ipsecctl: Syntax error in config file: ipsec rules not loaded

How to get around this, that is, get the host named 'parsed' inside the
ipsec.conf file towards the
correct IP address ?

regards
Wiljoh