Re: IKEv1 and IKEv2 coexistence

[Stuart Henderson]

On 2023-01-09, jean-yves boisiaud  
wrote:
> Hello,
>
> I have an OpenBSD firewall running IPSEc with IKEv1.
>
> As said here https://marc.info/?l=openbsd-misc&m=163819895506660&w=2
> isakmpd cannot coexist with IKEv2.
>
> But I have several IPs, could I use one IP for IKEv1 and  another one for
> IKEv2 ?

Not with iked/isakmpd unless you run one of them in a VM.

-- 
Please keep replies on the mailing list.

IKEv1 and IKEv2 coexistence

[jean-yves boisiaud]

Hello,

I have an OpenBSD firewall running IPSEc with IKEv1.

As said here https://marc.info/?l=openbsd-misc&m=163819895506660&w=2
isakmpd cannot coexist with IKEv2.

But I have several IPs, could I use one IP for IKEv1 and  another one for
IKEv2 ?

I'm running OpenBSD 7.1.

Thank you for your help.

-- 
Jean-Yves Boisiaud - Alcor Consulting
49, rue du Chemin Vert
49300 Cholet
mobile : +33 6 63 71 73 46

Re: IKEv1 and IKEv2 coexistence

[Grzegorz Patola]

Many thanks Stuart.

On 30/11/2021 08:48, Stuart Henderson wrote:

On 2021-11-29, Grzegorz Patola  wrote:

Could you tell me if it is possible to run ipsec in v1 and v2

ie. isakmpd and iked daemons on just one gateway ?

It is not.



--




We Revolutionise Customer Journeys.

www.engagehub.com 
 | Follow us on LinkedIn 







This communication is sent by Engage Hub and contains information which 
is confidential and privileged and is intended for the use of the addressee 
only. If you are not the intended recipient please destroy and contact the 
sender. Please note that any distribution, copying or use of this 
communication or the information in it is strictly prohibited. Any views 
expressed in this email are those of the individual sender and may not 
necessarily reflect the views of Engage Hub. Engage Hub makes no warranties 
that emails are virus free. This company is registered in England and Wales 
as Brainstorm Mobile Solutions Ltd and trading as Engage Hub (registered at 
Studio 311 Highgate Studios, 53-79 Highgate Road, London NW5 1TL. Company 
Number: 01661467; VAT Number: 214 9845 90) and Oxygen8 Communications 
Limited (registered in Ireland at 1st Floor, 21-22 Grafton Street, Dublin 
2, Ireland. Company No: 350312; VAT Number: 6370312O).

Re: IKEv1 and IKEv2 coexistence

[Stuart Henderson]

On 2021-11-29, Grzegorz Patola  wrote:
> Could you tell me if it is possible to run ipsec in v1 and v2
>
> ie. isakmpd and iked daemons on just one gateway ?

It is not.

IKEv1 and IKEv2 coexistence

[Grzegorz Patola]

Hi All,


Could you tell me if it is possible to run ipsec in v1 and v2

ie. isakmpd and iked daemons on just one gateway ?


Thanks,

Greg.




--




We Revolutionise Customer Journeys.

www.engagehub.com 
 | Follow us on LinkedIn 







This communication is sent by Engage Hub and contains information which 
is confidential and privileged and is intended for the use of the addressee 
only. If you are not the intended recipient please destroy and contact the 
sender. Please note that any distribution, copying or use of this 
communication or the information in it is strictly prohibited. Any views 
expressed in this email are those of the individual sender and may not 
necessarily reflect the views of Engage Hub. Engage Hub makes no warranties 
that emails are virus free. This company is registered in England and Wales 
as Brainstorm Mobile Solutions Ltd and trading as Engage Hub (registered at 
Studio 311 Highgate Studios, 53-79 Highgate Road, London NW5 1TL. Company 
Number: 01661467; VAT Number: 214 9845 90) and Oxygen8 Communications 
Limited (registered in Ireland at 1st Floor, 21-22 Grafton Street, Dublin 
2, Ireland. Company No: 350312; VAT Number: 6370312O).