>From the documentaion I tend to agree with this reasoning: > At first glance, ipsec.conf appears to marginalize the need for > isakmpd.conf, simplifying the flow definitions. The syntax is very > easy and resembles the linguistic format we've come to love in pf.conf.
I'm not sure if the isakmpd.policy file is still required though but there's no reference to it in the ipsec.conf(5)<http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec.conf&sektion =5&arch=&apropos=0&manpath=OpenBSD+Current>man pages so maybe it too is deprecated? Tarquin. On 9/15/05, Massimo <[EMAIL PROTECTED]> wrote: > On Wed, 2005-09-14 at 11:41 -0400, Jason Dixon wrote: > > > At first glance, ipsec.conf appears to marginalize the need for > > isakmpd.conf, simplifying the flow definitions. The syntax is very > > easy and resembles the linguistic format we've come to love in pf.conf. > > I suppose for using ike within ipsec.conf isakmpd should be already > running, right ? > So a blank isakmpd.conf or one with the defaults should be enough? > > -- > Massimo.run();
