Re: isakmpd.conf multinet question

2005-10-12 Thread Mathieu Sauve-Frankel
On Tue, Oct 11, 2005 at 12:42:08PM +0200, Runo Forrisdahl wrote: > Can I add a second net to the remote end like this: > > Remote-ID= net-remote, net-remote2 no you can't.

Re: isakmpd.conf multinet question

2005-10-11 Thread Ryan Puckett
I did it by specifying each net-to-net connection. I need to look at the new 3.8 Ipsec tools to see if I can clean this up. Another example (and the one I initially referenced) can be found in /usr/share/ipsec/isakmpd/VPN-3way-template.conf . (isakmpd via OBSD 3.6): [Phase 1] 1.2.3.4=

Re: isakmpd.conf multinet question

2005-10-11 Thread archi
Hi, See my config for 3 remote networks # cat /etc/isakmpd/isakmpd.conf [Phase 1] x.x.x.x= ISAKMP-peer-host1 [Phase 2] Connections=IPsec-host2-host1,IPsec-logosl2-hostl1.1, IPsec-host2-host1.2 [ISAKMP-peer-host1] Phase= 1 Transport= udp Addre

isakmpd.conf multinet question

2005-10-11 Thread Runo Forrisdahl
Hi, currently I have a VPN consisting of this: (..snip..) [tunnel-opengw-cisco] Phase= 2 ISAKMP-peer=cisco Configuration= quick-mode Local-ID= net-opengw Remote-ID= net-remote (..snip..) Can I add a second net to the remote end l