questions regarding ipsec tunnel

2007-06-15 Thread Sebastian Reitenbach
Hi all, I have a problem to get a stable IPsec connection running from my OpenBSD 4.1 host to some kind of VPN appliance. ike active esp from 192.168.27.0/24 to 192.168.0.0/16 \ local 223.150.201.44 peer 34.123.15.43 \ main auth hmac-md5 enc 3des group grp2 \ quick auth

Re: questions regarding ipsec tunnel

2007-06-15 Thread Claer
On Fri, Jun 15 2007 at 14:12, Sebastian Reitenbach wrote: Hi all, Hi, ike active esp from 192.168.27.0/24 to 192.168.0.0/16 \ local 223.150.201.44 peer 34.123.15.43 \ main auth hmac-md5 enc 3des group grp2 \ quick auth hmac-md5 enc aes group modp1024 \ psk

Re: questions regarding ipsec tunnel

2007-06-15 Thread Stuart Henderson
On 2007/06/15 15:39, Claer wrote: There is a mistake in the main mode declaration. Your group cannot be set to grp2. You should use modp1024 as in the quick mode statement. It's not that, either form is actually permitted.

Re: questions regarding ipsec tunnel

2007-06-15 Thread Sebastian Reitenbach
Hi, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/06/15 15:39, Claer wrote: There is a mistake in the main mode declaration. Your group cannot be set to grp2. You should use modp1024 as in the quick mode statement. It's not that, either form is actually permitted. after some more

Re: questions regarding ipsec tunnel

2007-06-15 Thread Reyk Floeter
On Fri, Jun 15, 2007 at 09:02:37PM +0200, Sebastian Reitenbach wrote: after some more comparing the configuration on both sides, the problem turned out to be md5, on OpenBSD its just 128 bits, but on the other side 160 bit were used. we only talked about md5 ;) huh? there is no such thing