Re: IPSec isakmpd pre shared interoperability with Fortigate VPN

2012-04-01 Thread Russell Garrison
Does look like the line, but is the OpenBSD ipsec VPN new to you? If it is I suggest building one between two OpenBSD machines and testing to see how you can break/change things from the defaults in the man pages. Doing that really made a difference for me after completely flopping on the first try

Re: IPSec isakmpd pre shared interoperability with Fortigate VPN

2012-04-01 Thread Stuart Henderson
On 2012-04-01, Girish Venkatachalam wrote: > If it matters in any manner at all, my ipsec.conf is > > #ike passive esp from $localnet to $remotenet peer $remoteip \ > main auth hmac-sha1 enc 3des group modp1536 \ > quick auth hmac-sha1 enc 3des group none psk # on the first line? that makes th

Re: IPSec isakmpd pre shared interoperability with Fortigate VPN

2012-04-01 Thread Rafael Zalamena
On Sun, Apr 01, 2012 at 08:13:25PM +0530, Girish Venkatachalam wrote: > Dear all, > SNIP > If it matters in any manner at all, my ipsec.conf is > > #ike passive esp from $localnet to $remotenet peer $remoteip \ > main auth hmac-sha1 enc 3des group modp1536 \ > quick auth hmac-sha1 enc 3des grou

Re: IPSec isakmpd pre shared interoperability with Fortigate VPN

2012-04-01 Thread Janne Johansson
2012/4/1 Girish Venkatachalam : > Dear all, > > I am having a ball of a time configuring ipsec.conf against our > friendly Fortigate VPN box. > I think the model is some very old one, perhaps 50B or something. > Now some other Linux based commercial VPN is able to talk to it as > Fortigate also is

IPSec isakmpd pre shared interoperability with Fortigate VPN

2012-04-01 Thread Girish Venkatachalam
Dear all, I am having a ball of a time configuring ipsec.conf against our friendly Fortigate VPN box. I think the model is some very old one, perhaps 50B or something. Now some other Linux based commercial VPN is able to talk to it as Fortigate also is from the same parent. So is every other bo