Not all allowed domains have peer-fqdn associated with them. Either specify the missing peer-fqdn or remove it from the Allow ...