Re: OPENBSD isakmpd VPN Problems

[Håkan Olsson]

On 10 aug 2006, at 16.26, Tech Support wrote:

Question:  Can  I have an isakmpd.conf file, set only the config  
options I
want, run isakmpd WITHOUT
the -K and still use ipsectl?

Yes.

Another item - IS PFS disabled or enabled by default when one uses
ipsecctl? Can this be set?

pfs is enabled by default.

PFS is off on the vendors side, does this matter? I will search how to
disable on my end

Definitely. A suite proposal with PFS can never match a proposal  
without it.

/H