ipsec vpn with os x clients

2007-07-12 Thread eric
I have an OpenBSD 4.1 (OpenBSD 4.1 GENERIC#1435 i386) acting as a PPPoE NAT router & firewall to my ISP. I'd like to replace my OS X 10.4 Server IPSEC VPN with the OpenBSD system. My "road warrior" clients are all OS X 10.4.10. I read that 10.4 supports AES encryption but advertises 3DES b

Re: ipsec vpn with os x clients

2007-07-13 Thread Hans-Joerg Hoexer
Hi, On Thu, Jul 12, 2007 at 05:38:47PM -0800, eric wrote: > I have an OpenBSD 4.1 (OpenBSD 4.1 GENERIC#1435 i386) acting > as a PPPoE NAT router & firewall to my ISP. I'd like to replace my OS > X 10.4 Server IPSEC VPN with the OpenBSD system. My "road warrior" > clients are all OS X 10.4.1

Re: ipsec vpn with os x clients

2007-07-13 Thread eric
> # cat ipsec.conf > ike dynamic from any to any \ > main auth hmac-sha1 enc 3des group modp1024 \ > quick auth hmac-sha1 enc 3des psk TheSecret > this should be "ike passive from ..." roger that... # cat ipsec.conf ike passive from any to any \ main auth hmac-sha1 enc 3des group modp1024 \