VPN Howto

2006-12-07 Thread misc\(at\)openbsd.org
Hello, I want to replace my linux firewall/vpn-server with an openbsd 4.0 installation. My problem is, that the linux server is a vpn-endpoint with two draytek vigor 2900. At the moment I'm looking for a vpn-documentation (or a howto) for ipsec and openbsd 4.0. Does somebody have a link for me? Th

Re: VPN Howto

2006-12-07 Thread Darren Spruell
On 12/7/06, misc(at)openbsd.org <[EMAIL PROTECTED]> wrote: Hello, I want to replace my linux firewall/vpn-server with an openbsd 4.0 installation. My problem is, that the linux server is a vpn-endpoint with two draytek vigor 2900. At the moment I'm looking for a vpn-documentation (or a howto) fo

Re: VPN Howto

2006-12-08 Thread Brian Candler
On Thu, Dec 07, 2006 at 11:08:40PM +0100, misc(at)openbsd.org wrote: > I want to replace my linux firewall/vpn-server with an openbsd 4.0 > installation. My problem is, that the linux server is a vpn-endpoint > with two draytek vigor 2900. At the moment I'm looking for a > vpn-documentation (or a h

Re: VPN Howto

2006-12-09 Thread Mathieu Sauve-Frankel
> So whereas Linux has both a Security Policy Database and a Security > Association Database in the kernel, I believe (and someone please correct me > if I'm wrong) that OpenBSD kernel has only an SAD. You put your policy into > ipsecctl, which passes it onto isakmpd, and isakmpd negotiates keys an

Re: VPN Howto

2006-12-11 Thread Brian Candler
On Sun, Dec 10, 2006 at 11:00:01AM +0900, Mathieu Sauve-Frankel wrote: > > So whereas Linux has both a Security Policy Database and a Security > > Association Database in the kernel, I believe (and someone please correct me > > if I'm wrong) that OpenBSD kernel has only an SAD. You put your policy