Home

Forums

Stories

Knowledge Base

Business Community > Gateways > site-2-site IPsec not working with FQDN only with IP as remote-gateway

< Gateways

site-2-site IPsec not working with FQDN only with IP as remote-gateway

gerv_d

Friday - last edited Yesterday

Posts: 1

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2025-11-28

site-2-site IPsec not working with FQDN only with IP as remote-gateway

Friday - last edited Yesterday

Model: ER605 (TL-R605)

Hardware Version: V2

Firmware Version: 2.3.3 Build 20251029 Rel.18054

I have configured all my gateways through an omada controller. I recently updated one ER605 V2 to actual firmware 2.3.3. Now my IPsec tunnels wont work. It came out, that FQDN entries as remote-gateway are not working, when entering an IP Adresse, the tunnels work again. Why is that and is there a workaround for that? Will this feature be repaired in future releases? I also have several ER7206, does anybody know, if this problem exists there in actual firmware?

3 Reply

MR.S

LV6

14 hours ago

Posts: 3011

Helpful: 1063

Solutions: 429

Stories: 0

Registered: 2018-08-17

Re:site-2-site IPsec not working with FQDN only with IP as remote-gateway

14 hours ago

@gerv_d

FQDN works fine on all Omada routers, including the ER605, I've used it for years without any problems. But you can try deleting the VPN configuration and re-entering it. Also restart the router if you haven't done so.

also check the dns server on the internet interface. also set static dns, for example 1.1.1.1 and 1.0.0.1

GRL

LV4

50 minutes ago

Posts: 952

Helpful: 387

Solutions: 116

Stories: 0

Registered: 2022-01-02

Re:site-2-site IPsec not working with FQDN only with IP as remote-gateway

50 minutes ago

@gerv_d

I can confirm what MR.S has said, i have recently changed our company DNS records with an additional A record pointing directly to our WAN IP, so i could use FQDN instead of IP on both remote site-to-site and dial-in VPN users (allowing me to change the IP in the future and not have to reconfigure dozens of clients, just the DNS record) and it works fine