Re: OPENBSD isakmpd VPN Problems

2006-08-14 Thread Håkan Olsson
On 11 aug 2006, at 22.59, Steve Glaus wrote: ... I'm mostly asking questions now for my own curiousity so feel free everyone to ignore these ramblings. - Is PFS something that's negotiated only during phase 2? Could this be why it was passing phase one but not passing phase two? Yup. PFS

Re: OPENBSD isakmpd VPN Problems

2006-08-11 Thread Håkan Olsson
On 10 aug 2006, at 16.26, Tech Support wrote: Question: Can I have an isakmpd.conf file, set only the config options I want, run isakmpd WITHOUT the -K and still use ipsectl? Yes. Another item - IS PFS disabled or enabled by default when one uses ipsecctl? Can this be set? pfs is

Re: OPENBSD isakmpd VPN Problems

2006-08-11 Thread Steve Glaus
Hekan Olsson wrote: On 10 aug 2006, at 16.26, Tech Support wrote: Question: Can I have an isakmpd.conf file, set only the config options I want, run isakmpd WITHOUT the -K and still use ipsectl? Yes. Another item - IS PFS disabled or enabled by default when one uses ipsecctl? Can this

Re: OPENBSD isakmpd VPN Problems

2006-08-10 Thread Hans-Joerg Hoexer
Hi, On Thu, Aug 10, 2006 at 12:04:08AM -0400, Steve Glaus wrote: ... One glaring difference that I can see is that when I connect to the DLINK I use a passive connection and isakpmd sits and listens for incoming connections. Could this be a lifetime issue? Tech support at the other end

Re: OPENBSD isakmpd VPN Problems

2006-08-10 Thread Tech Support
# cat /etc/isakmpd.isakmpd.conf [General] Default-phase-1-lifetime= 3600 Default-phase-2-lifetime= 1200 Question: Can I have an isakmpd.conf file, set only the config options I want, run isakmpd WITHOUT the -K and still use ipsectl? Another item - IS PFS disabled or enabled

Re: OPENBSD isakmpd VPN Problems

2006-08-10 Thread Alexander Hall
Tech Support wrote: ike esp from 10.110.38.0/24 to 172.28.128/0/21 peer 204.244.106.134 main ^ typo? (Looks right in isakmpd_out) Out of curiousity, why would you consider 10.110.38.0/24 a typo? Am I doing

Re: OPENBSD isakmpd VPN Problems

2006-08-10 Thread Matthew Closson
On Thu, 10 Aug 2006, Steve Glaus wrote: Daniel Ouellet wrote: Steve Glaus wrote: Hello all, I'm finally desperate enough to post this to a list... I have been trying for two days to set up a basic VPN between my OpenBSD box at home and my OpenBSD box at work. The box at home is running

Re: OPENBSD isakmpd VPN Problems

2006-08-10 Thread Steve Glaus
Matthew Closson wrote: On Thu, 10 Aug 2006, Steve Glaus wrote: Daniel Ouellet wrote: Steve Glaus wrote: Hello all, I'm finally desperate enough to post this to a list... I have been trying for two days to set up a basic VPN between my OpenBSD box at home and my OpenBSD box at work. The

Re: OPENBSD isakmpd VPN Problems

2006-08-09 Thread Steve Glaus
Daniel Ouellet wrote: Steve Glaus wrote: Hello all, I'm finally desperate enough to post this to a list... I have been trying for two days to set up a basic VPN between my OpenBSD box at home and my OpenBSD box at work. The box at home is running 3.7 and the box here at work is running 3.9.

OPENBSD isakmpd VPN Problems

2006-07-19 Thread Steve Glaus
Hello all, I'm finally desperate enough to post this to a list... I have been trying for two days to set up a basic VPN between my OpenBSD box at home and my OpenBSD box at work. The box at home is running 3.7 and the box here at work is running 3.9. I know this is going to look like a lot

Re: OPENBSD isakmpd VPN Problems

2006-07-19 Thread Daniel Ouellet
Steve Glaus wrote: Hello all, I'm finally desperate enough to post this to a list... I have been trying for two days to set up a basic VPN between my OpenBSD box at home and my OpenBSD box at work. The box at home is running 3.7 and the box here at work is running 3.9. May be worth to have