Re: iked + isakmpd on the same machine

2014-04-24 Thread Alexander Hall
On 04/24/14 22:28, Mike Belopuhov wrote: On 24 April 2014 22:25, Alexander Hall wrote: On 04/24/14 21:53, Stuart Henderson wrote: On 2014/04/24 20:30, Mike Belopuhov wrote: On 24 April 2014 20:25, Chris Cappuccio wrote: Mike Belopuhov [m...@belopuhov.com] wrote: more like it's not sup

Re: iked + isakmpd on the same machine

2014-04-24 Thread Stuart Henderson
On 2014/04/24 22:28, Mike Belopuhov wrote: > On 24 April 2014 22:25, Alexander Hall wrote: > > On 04/24/14 21:53, Stuart Henderson wrote: > >> > >> On 2014/04/24 20:30, Mike Belopuhov wrote: > >>> > >>> On 24 April 2014 20:25, Chris Cappuccio wrote: > > Mike Belopuhov [m...@belopuhov.co

Re: iked + isakmpd on the same machine

2014-04-24 Thread Mike Belopuhov
On 24 April 2014 22:25, Alexander Hall wrote: > On 04/24/14 21:53, Stuart Henderson wrote: >> >> On 2014/04/24 20:30, Mike Belopuhov wrote: >>> >>> On 24 April 2014 20:25, Chris Cappuccio wrote: Mike Belopuhov [m...@belopuhov.com] wrote: > > > more like it's not supported an

Re: iked + isakmpd on the same machine

2014-04-24 Thread Alexander Hall
On 04/24/14 21:53, Stuart Henderson wrote: On 2014/04/24 20:30, Mike Belopuhov wrote: On 24 April 2014 20:25, Chris Cappuccio wrote: Mike Belopuhov [m...@belopuhov.com] wrote: more like it's not supported and is not supposed to work. it's like running nginx and apache at the same time hey,

Re: iked + isakmpd on the same machine

2014-04-24 Thread Stuart Henderson
On 2014/04/24 20:30, Mike Belopuhov wrote: > On 24 April 2014 20:25, Chris Cappuccio wrote: > > Mike Belopuhov [m...@belopuhov.com] wrote: > >> > >> more like it's not supported and is not supposed to work. > >> it's like running nginx and apache at the same time > > > > hey, nginx and httpd run c

Re: iked + isakmpd on the same machine

2014-04-24 Thread Mike Belopuhov
On 24 April 2014 20:25, Chris Cappuccio wrote: > Mike Belopuhov [m...@belopuhov.com] wrote: >> >> more like it's not supported and is not supposed to work. >> it's like running nginx and apache at the same time > > hey, nginx and httpd run concurrently quite fine on > different IP addresses, same

Re: iked + isakmpd on the same machine

2014-04-24 Thread Chris Cappuccio
Mike Belopuhov [m...@belopuhov.com] wrote: > > more like it's not supported and is not supposed to work. > it's like running nginx and apache at the same time hey, nginx and httpd run concurrently quite fine on different IP addresses, same box :)

Re: iked + isakmpd on the same machine

2014-04-24 Thread Mike Belopuhov
On 24 April 2014 12:12, Philipp wrote: > Am 22.04.2014 17:28 schrieb Mike Belopuhov: > >> more like it's not supported and is not supposed to work. > > not supposed as in 'not wanted'? > not supposed. > >> it's like running nginx and apache at the same time but > > Quite frankly: I'm doing that

Re: iked + isakmpd on the same machine

2014-04-24 Thread Philipp
Am 22.04.2014 17:28 schrieb Mike Belopuhov: more like it's not supported and is not supposed to work. not supposed as in 'not wanted'? it's like running nginx and apache at the same time but Quite frankly: I'm doing that in some locations ;-) worse since there are kernel tentacles involved

Re: iked + isakmpd on the same machine

2014-04-24 Thread Mike Belopuhov
On 22 April 2014 17:40, Claer wrote: > On Tue, Apr 22 2014 at 28:17, Mike Belopuhov wrote: > >> On 22 April 2014 17:13, Philipp >> wrote: >> > It happened! A remote peer *requires* IKEv2 - and I've to do that on a >> > machine running isakmpd with somewhat 25+ IKEv1 peers. >> > >> > First hurdle:

Re: iked + isakmpd on the same machine

2014-04-22 Thread Mike Belopuhov
On 22 April 2014 17:13, Philipp wrote: > It happened! A remote peer *requires* IKEv2 - and I've to do that on a > machine running isakmpd with somewhat 25+ IKEv1 peers. > > First hurdle: I cannot bind iked to a certain (carp) IP-address. Mad > workaround: start isakmpd (with Listen-on) first. > Se

iked + isakmpd on the same machine

2014-04-22 Thread Philipp
It happened! A remote peer *requires* IKEv2 - and I've to do that on a machine running isakmpd with somewhat 25+ IKEv1 peers. First hurdle: I cannot bind iked to a certain (carp) IP-address. Mad workaround: start isakmpd (with Listen-on) first. Second hurdle: iked loads "its" SAs and eventually