Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Trombley
On Thu, Oct 05, 2006 at 09:59:27PM +0200, Sven Ulland wrote: > Sven Ingebrigt Ulland wrote: > >[...] > > Thanks to all of you who have contributed with your > experiences with isakmpd/ipsec in OpenBSD. After some time > now, I've seen some more of the good and bad sides of our > VPN setup, and I'l

Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Sven Ulland
Sven Ingebrigt Ulland wrote: [...] Thanks to all of you who have contributed with your experiences with isakmpd/ipsec in OpenBSD. After some time now, I've seen some more of the good and bad sides of our VPN setup, and I'll share it with you. How long have you been running openbsd isakmpd/ips

Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Toni Mueller
Hi, On Mon, 21.08.2006 at 15:43:14 +0200, Sven Ingebrigt Ulland <[EMAIL PROTECTED]> wrote: > How long have you been running openbsd isakmpd/ipsec (in production)? I think I run this stuff since around 2000, or 2001 at the latest. > What problems, if any, have you had with the openbsd vpn > impl

Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Toni Mueller
Hi, On Mon, 21.08.2006 at 10:23:43 -0400, Melameth, Daniel D. <[EMAIL PROTECTED]> wrote: > We have since changed how we're doing this, but we had a Cisco and > OpenBSD VPN running for a few years. why, and how did you change? What's better now? Best, --Toni++

Re: Experience with isakmpd/ipsec in production?

2006-08-22 Thread Andreas Bihlmaier
On Tue, Aug 22, 2006 at 04:10:22PM +0200, Massimo Lusetti wrote: > On Mon, 2006-08-21 at 15:43 +0200, Sven Ingebrigt Ulland wrote: I'm making heavy usage of VPN to mount NFS over (so there are huge amounts of traffic going over the tunnel at maximum speed the CPUs can handle) and IPSEC itself wo

Re: Experience with isakmpd/ipsec in production?

2006-08-22 Thread Massimo Lusetti
On Mon, 2006-08-21 at 15:43 +0200, Sven Ingebrigt Ulland wrote: > How long have you been running openbsd isakmpd/ipsec (in production)? We've been using them since 3.9 and got small quirks mostly due to our misunderstanding of protocols and implementations, a little also due to the initial lack

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread James Mackinnon
PROTECTED] On Behalf Of Sven Ingebrigt Ulland Sent: Monday, August 21, 2006 10:43 AM To: misc@openbsd.org Subject: Experience with isakmpd/ipsec in production? We are about to deploy some fairly critical VPN functionality in our network, and for that purpose we're considering using OpenBSD with i

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Dag Richards
Sven Ingebrigt Ulland wrote: We are about to deploy some fairly critical VPN functionality in our network, and for that purpose we're considering using OpenBSD with isakmp/ipsec. We've had a test setup running for some time now with no problems, but I'm interested in hearing about your long-term

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Will H. Backman
Have you experienced any interoperability problems when establishing tunnels with peers that run other implementations (cisco, checkpoint, etc)? And if so, how do you work around those? None--after finding the correct initial configuration everything "just worked" and continued to. One

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Melameth, Daniel D.
Sven Ingebrigt Ulland wrote: > We are about to deploy some fairly critical VPN functionality in our > network, and for that purpose we're considering using OpenBSD with > isakmp/ipsec. We've had a test setup running for some time now with > no problems, but I'm interested in hearing about your long

Experience with isakmpd/ipsec in production?

2006-08-21 Thread Sven Ingebrigt Ulland
We are about to deploy some fairly critical VPN functionality in our network, and for that purpose we're considering using OpenBSD with isakmp/ipsec. We've had a test setup running for some time now with no problems, but I'm interested in hearing about your long-term experiences with running openbs