[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ISAKMP problem
In message <00ec01bf718a$29fc2840$0a83a8c0@localnet>, "Luke Renn" writes:
>This only took me two months to figure out :(
>
>Change your policy file to something like this (exactly like this):
>
>KeyNote-Version: 2
>Comment: This policy accepts ESP SAs from a remote that uses the right
>password
>Authorizer: "POLICY"
>Licensees: "thisismypassphrase"
>Conditions: app_domain == "IPsec policy" &&
> esp_present == "yes" -> "true";
>
>note that the "passphrase:thisismypassphrase" isn't there. leave the
>"passphrase:" out. And make you don't have the lines from from the example
>that start with $OpenBSD something or other. Let me know if you have more
>problems.
If you're running -current, you must have the "passphrase:" prefix.
-Angelos