Re: VPN Between OpenBSD and iOS

2014-01-13 Thread Tor Houghton
On Mon, Dec 30, 2013 at 09:22:18PM -0500, Matt Carlson wrote: Yasuoka, I tried that just now and it doesn't seem to make a difference. Thanks, At risk of replying off-topic and out of date, I'll ask the question anyway. Have you considered using OpenVPN, as there are working clients for

Re: VPN Between OpenBSD and iOS

2014-01-13 Thread Matthew P. Carlson
Tor, I've considered it and would prefer to get the native OpenBSD VPN working. That being said, I may look into OpenVPN if I can't get this to work. Thanks, Matt On Jan 13, 2014, at 4:14 AM, Tor Houghton t...@bogus.net wrote: On Mon, Dec 30, 2013 at 09:22:18PM -0500, Matt Carlson wrote:

Re: VPN Between OpenBSD and iOS

2014-01-13 Thread Giancarlo Razzolini
Em 13-01-2014 18:02, Matthew P. Carlson escreveu: Tor, I've considered it and would prefer to get the native OpenBSD VPN working. That being said, I may look into OpenVPN if I can't get this to work. Thanks, Matt Hi, I've used the OpenBSD native vpn, both with L2TP/IPSec and with

Re: VPN Between OpenBSD and iOS

2014-01-04 Thread mxb
I’m doing RADIUS auth. Here is my npppd.conf: tunnel L2TP protocol l2tp { listen on my public IP l2tp-hostname “myhostname.com l2tp-vendor-name OpenBSD l2tp-accept-dialin yes mru 1360 lcp-timeout 18 authentication-method mschapv2

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread mxb
I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is this: ike passive esp transport \ proto udp from $local_gw to any port 1701 \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha1 enc aes \

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread Matthew P. Carlson
mxb, Great. I'll try that this weekend. Thanks, Matt On Jan 3, 2014, at 8:03 AM, mxb m...@alumni.chalmers.se wrote: I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is this: ike passive esp transport \ proto udp from

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread Matt Carlson
mxb, I tried that and I'm getting the same results. Any other ideas? What does your npppd.conf look like? Thanks, Matt On Fri, Jan 3, 2014 at 8:03 AM, mxb m...@alumni.chalmers.se wrote: I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Jeff Goettsch
What does your npppd.conf look like? -- Jeff Goettsch Agricultural and Resource Economics http://agecon.ucdavis.edu/ 530-752-2219 On 12/29/13 5:58 PM, Matt Carlson wrote: Hello, I'm trying to get my iPhone with iOS 7.0.4 to connect to my OpenBSD VPN server. If I understand the problem

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread YASUOKA Masahiko
Hi, On Sun, 29 Dec 2013 20:58:03 -0500 Matt Carlson obsda0...@mpcarlson.com wrote: # grep -v ^# /etc/ipsec.conf ike passive esp transport \ proto udp \ from any to any port 1701 \ main auth hmac-sha1 enc aes group modp1024 \ quick auth hmac-sha1 enc aes-256 \ psk 1

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Matt Carlson
Yasuoka, I tried that just now and it doesn't seem to make a difference. Thanks, Matt On Mon, Dec 30, 2013 at 7:34 PM, YASUOKA Masahiko yasu...@yasuoka.netwrote: Hi, On Sun, 29 Dec 2013 20:58:03 -0500 Matt Carlson obsda0...@mpcarlson.com wrote: # grep -v ^# /etc/ipsec.conf ike

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Matt Carlson
Jeff, Here you go: $ grep -v ^# /etc/npppd/npppd.conf authentication LOCAL type local { users-file /etc/npppd/npppd-users } tunnel L2TP_ipv4 protocol l2tp { listen on 0.0.0.0 } ipcp IPCP { pool-address 10.0.0.2-10.0.0.254 dns-servers 8.8.8.8 }

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Mike Pistone
Strangely enough I am having the exact same problem. OPENBSD 5.4, etc. Phase I works once I tweaked my isakmp settings to match IOS7's capabilities (no modp2048 mainly), but I get the same messages Matt does on phase II. I have a npppd PPTP tunnel to the same server that works fine. It is

VPN Between OpenBSD and iOS

2013-12-29 Thread Matt Carlson
Hello, I'm trying to get my iPhone with iOS 7.0.4 to connect to my OpenBSD VPN server. If I understand the problem correctly, it's unable to negotiate phase 2. I'd welcome any pointers. Below, I've provided the output of uname, rc.conf.local, ipsec.conf, messages, isakmpd.pcap. I changed a

Re: VPN Between OpenBSD and iOS

2013-12-29 Thread patrick keshishian
Hi, On 12/29/13, Matt Carlson obsda0...@mpcarlson.com wrote: Hello, I'm trying to get my iPhone with iOS 7.0.4 to connect to my OpenBSD VPN server. If I understand the problem correctly, it's unable to negotiate phase 2. I'd welcome any pointers. I'm somewhat curious, about this. Can you