Issue creating IPsec tunnel with identification_type FQDN

Hi Cato community,

I have encountered an issue where it is not possible to create a IPSec tunnel using the following configurations

Site type: IPSecV2

connectionMode: RESPONDER_ONLY

identificationType: FQDN

Since the IPsec is responder only with FQDN identification, the updateIpsecIkeV2SiteTunnels  mutation cannot be used to create such tunnels as it will require a public site ip, but FQDN will give local ID.

When I tried to enter a dummy ip to test it out, it shows a "GraphQL error: Required"; leaving it blank will produce Required field 'primary_public_site_ip' is missing or empty.

Are there any solutions/workarounds for this?

Let me know if more information is required.

Cheers,

VincentP