Re: OpenBSD 5.5 won't initiate VPN (Ipsec site-to-site)connection to Cisco device

2015-07-13 Thread Stuart Henderson
On 2015-07-10, Motty Cruz wrote: > Hello, > > I have a gateway machine OpenBSD 5.5 that won't not initiate connection > to peer. The one way to establish VPN tunnel is if peer ping IP in my > subnet. isakmpd usually tries to bring up the connection as soon as it's configured, but perhaps this n

Re: OpenBSD 5.5 won't initiate VPN (Ipsec site-to-site)connection to Cisco device

2015-07-11 Thread Motty Cruz
cisco peers and the only problem were using > wrong credentials > > > Date: Fri, 10 Jul 2015 12:59:56 -0700 > > From: motty.c...@gmail.com > > To: misc@openbsd.org; motty.c...@gmail.com > > Subject: OpenBSD 5.5 won't initiate VPN (Ipsec > site-to-site)connect

OpenBSD 5.5 won't initiate VPN (Ipsec site-to-site)connection to Cisco device

2015-07-10 Thread Motty Cruz
Hello, I have a gateway machine OpenBSD 5.5 that won't not initiate connection to peer. The one way to establish VPN tunnel is if peer ping IP in my subnet. in pf.conf IpsecClients="{ 173.16.2.20/32, 139.19.10.51/32 }" IpsecHosts="{ 192.16.38.24/27 }" # IPSec VPN tunnel pass in on $OUTSIDE

Re: VPN Ipsec

2008-11-07 Thread Louis Opter
o;?On Thu, 2008-11-06 at 23:07 +0100, Felipe Alfaro Solana wrote: > On Thu, Nov 6, 2008 at 9:39 AM, Louis Opter <[EMAIL PROTECTED]> wrote: > > Hello, > > > > I am trying to set up an ipsec vpn between two networks. But, I can't > > figure out why it doesn't work. > > > > I get some errors like (he

Re: VPN Ipsec

2008-11-06 Thread Felipe Alfaro Solana
On Thu, Nov 6, 2008 at 9:39 AM, Louis Opter <[EMAIL PROTECTED]> wrote: > Hello, > > I am trying to set up an ipsec vpn between two networks. But, I can't > figure out why it doesn't work. > > I get some errors like (here on the "malenfant gate", see network map > below) : > Plcy 30 keynote_cert_ob

VPN Ipsec

2008-11-06 Thread Louis Opter
Hello, I am trying to set up an ipsec vpn between two networks. But, I can't figure out why it doesn't work. I get some errors like (here on the "malenfant gate", see network map below) : Plcy 30 keynote_cert_obtain: failed to open "/etc/isakmpd/keynote//192.168.1.159/credentials" Default rsa

Re: VPN/IPSEC trouble with Checkpoint

2007-01-12 Thread Stefan Sczekalla-Waldschmidt
OTECTED] > Im Auftrag von Olivier Horn > Gesendet: Donnerstag, 11. Januar 2007 18:15 > An: misc@openbsd.org > Betreff: VPN/IPSEC trouble with Checkpoint > > Hi all! > I have a problem with a VPN tunnel. > > The VPN is set between an OpenBSD 4.0 GENERIC and a Checkpoint

Re: VPN/IPSEC trouble with Checkpoint

2007-01-11 Thread Camiel Dobbelaar
If you are willing to try ipsec.conf instead of isakmpd.conf. I use the following for a VPN with a Checkpoint NG. ike esp from a.a.a.a/24 to b.b.b.b/20 \ local x.x.x.x peer y.y.y.y \ main auth hmac-md5 enc 3des group grp2 \ quick auth hmac-md5 enc 3des group none \ psk secretsecr

Re: VPN/IPSEC trouble with Checkpoint

2007-01-11 Thread bofh
Are you sure it's not a problem with fp3? Iirc, there were some interoperability issues with that version. Latest patches for FP3? On 1/11/07, Olivier Horn <[EMAIL PROTECTED]> wrote: Hi all! I have a problem with a VPN tunnel. The VPN is set between an OpenBSD 4.0 GENERIC and a Checkpoint NG

VPN/IPSEC trouble with Checkpoint

2007-01-11 Thread Olivier Horn
Hi all! I have a problem with a VPN tunnel. The VPN is set between an OpenBSD 4.0 GENERIC and a Checkpoint NG FP3. When I etablish the tunnel all is okay for a while. But after a moment (variable) the tunnel break because a NO_PROPOSAL_CHOSEN. The problem appear to come from the OpenBSD side (see