Hi, One of my clients is a major bank. We need to exchange data a few times a day at different intervals, and they're insisting that we initiate the VPN on demand with relevent traffic.
It works from their end. Tunnel is down, they send a ping, first packet is dropped as the tunnel is brought up, subsequent traffic reaches its destination. What I can't see in the man pages, guides, help files is how to get an OpenBSD firewall to do the same thing. I still use isakmpd as I have created several custom transform configurations that I've not had time to figure out how to migrate over. And because I am familiar with it. I use OpenBSD 4.8, and will be upgrading as soon as the discs arrive. Is it possible? Can you who me how? Thanks! Nemir
