ISAKMPD with 2 x DYNDNS - we did it !

From: Admins WebSecurity <office(at)admins.ws>
Date: Fri Feb 28 2003 - 05:20:51 EST

Hi Ralf,  

Yes it is possible to have a VPN using OpenBSD with dyndns host on both ends !
You have to modify by yourself in the souce or you can download our ready to go binary at:
http://www.admins.ws/modules.php?name=Downloads&d_op=getit&lid=24

Best Regards
Dirk

Admins WebSecurity - who wants to hack your System today ? http://www.admins ws

          Phone + 49 - 9921 - 960888 IT-Security Newsletter in German language :

              Subscribe at : http://www.admins.ws/modules php?name=Newsletter  

-------Original-Nachricht-------  

Von: Ralf Hornik
Datum: Freitag, 28. Februar 2003 10:30:49 An: tech@openbsd.org
Betreff: Interoperation isakmpd and freeswan  

Hi all,  

I have problems keeping the ipsec tunnel between 2 dynamic DNS boxes. The isakmpd does not delete the existing SA if the ipsec on freeswan is restartet but
oppposite it works fine.  

On freeswan I must set in /etc/ipsec/ipsec.conf:

-------------8<---------------------

config setup
....
# Close down old connection when new one using same ID shows up. uniqueids=yes
....
------------->8---------------------
 

is it possible to set this on isakmpd too? Yes, I know It's veeery ugly to make site to site vpn between 2 ddns machines but It is
the cheapest kind of doing it. ;-)
Thanx and regards  

Ralf

-- 
 
PGP Key ID: 0x70FBC540
PGP Key Fingerprint: 3C02 F66F 2596 35FD 1311 68FA 54C2 2A90 70FB C540
 
 
. 

Received on Fri Feb 28 05:26:24 2003