Re: Behaviour of IPsec when there are two flow-pairs between same gateways?

i don't see this problem with openbsd 3.2.

however, i'm setting up the flows/SPD with ipsecadm.

e.g.

ipsecadm flow -addr 11.0.0.0/8 192.168.40.0/24 -src 10.0.0.1 -dst 192.168.0.1 -proto esp -out -require
ipsecadm flow -addr 192.168.40.0/24 11.0.0.0/8 -src 10.0.0.1 -dst 192.168.0.1 -proto esp -in -require
ipsecadm flow -addr 12.0.0.0/8 192.168.40.0/24 -src 10.0.0.1 -dst 192.168.0.1 -proto esp -out -require
ipsecadm flow -addr 192.168.40.0/24 12.0.0.0/8 -src 10.0.0.1 -dst 192.168.0.1 -proto esp -in -require

isakmpd is just used for negotiation the SAs.

all you need for authentication is

/etc/isakmpd/private/local.key
/etc/isakmpd/pubkeys/ipv4/192.168.0.1

-markus Received on Fri Jan 24 04:39:17 2003

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek