Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread readme
On Tue, Oct 24, 2023 at 10:56:40PM +0200, Tobias Heider wrote: >> > > ikev2 "LINUX-CLIENT_INET4_LAN" passive esp \ >> > > from 10.88.0.0/22 to 10.88.12.0/24 \ >> > > from 203.0.113.92 to 10.88.12.0/24 \ >> > > peer any local 203.0.113.92 \ >> > > ikesa enc aes-256-gcm-12 prf hmac-sha2-512 g

Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread Tobias Heider
> > > ikev2 "LINUX-CLIENT_INET4_LAN" passive esp \ > > > from 10.88.0.0/22 to 10.88.12.0/24 \ > > > from 203.0.113.92 to 10.88.12.0/24 \ > > > peer any local 203.0.113.92 \ > > > ikesa enc aes-256-gcm-12 prf hmac-sha2-512 group ecp521 \ > > >childsa enc aes-256-gcm prf hmac-sha2-512 gro

Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread Tobias Heider
On Tue, Oct 24, 2023 at 10:42:11PM +0200, Tobias Heider wrote: > On Tue, Oct 24, 2023 at 03:35:57PM -0500, rea...@catastrophe.net wrote: > > On Tue, Oct 24, 2023 at 03:06:41PM -0500, rea...@catastrophe.net wrote: > > [..] > > >$ uname -a > > >OpenBSD openbsd-server 7.4 GENERIC#1336 amd64 > > > > >

Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread Tobias Heider
On Tue, Oct 24, 2023 at 03:35:57PM -0500, rea...@catastrophe.net wrote: > On Tue, Oct 24, 2023 at 03:06:41PM -0500, rea...@catastrophe.net wrote: > [..] > >$ uname -a > >OpenBSD openbsd-server 7.4 GENERIC#1336 amd64 > > > >ikev2 "LINUX-CLIENT_INET4_LAN" passive esp \ > > from 10.88.0.0/22 to 10.88

Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread readme
On Tue, Oct 24, 2023 at 03:06:41PM -0500, rea...@catastrophe.net wrote: [..] >$ uname -a >OpenBSD openbsd-server 7.4 GENERIC#1336 amd64 > >ikev2 "LINUX-CLIENT_INET4_LAN" passive esp \ > from 10.88.0.0/22 to 10.88.12.0/24 \ > from 203.0.113.92 to 10.88.12.0/24 \ > peer any local openbsd-server.ex

Re: Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread Tobias Heider
Hi, On Tue, Oct 24, 2023 at 03:06:41PM -0500, rea...@catastrophe.net wrote: > I have a small raspberry pi device that I'd like to connect to a 7.4 > machine with iked(8) and PSK auth, to start. The rpi device is going > to be on a mobile network and behind a small NAT device. > > I haven't had

Iked between OpenBSD and Linux (raspberry pi)

2023-10-24 Thread readme
I have a small raspberry pi device that I'd like to connect to a 7.4 machine with iked(8) and PSK auth, to start. The rpi device is going to be on a mobile network and behind a small NAT device. I haven't had any problem with the following configurations between two OpenBSD devices, but the rpi