Re: IKEv2 vpn between OpenBSD 6.2 and Cisco ASA 5510 using PSK

2018-04-17 Thread danial
I'll answer my own post. I've come to the conclusion that the OpenBSD IKEv2 implementation in iked is incompatible with Cisco. It works between OpenBSD boxes but none of the several Cisco ASA devices I've tried with did I get it to work. Switching to IKEv1, i.e. ISAKMPd, works immediately. / Dan

IKEv2 vpn between OpenBSD 6.2 and Cisco ASA 5510 using PSK

2018-01-22 Thread danial
Hi, I feel that I've tried just about every permutation of the various iked and Cisco crypto settings to get this tunnel up and it just won't work. One endpoint is a OpenBSD 6.2 and the other is a Cisco ASA 5510 9.1(7). I started out with high crypto settings but have adjusted down along the wa