VPN's using IPSec/ISAKMP between Cisco and oBSD (?)

[Tor Houghton <torh_(_at_)_bogus_(_dot_)_net>]

Hi,

I am currently working on a VPN solution on Cisco routers, and have met a
few problems. I am therefore thinking about substituting one of the
elements with an OpenBSD server.

The question is, has anyone got any ideas if it will work?

The layout I want is follows:


            site1 ---- "hub" ---- site5
                      /  |  \
                     /   |   \
                site2    |    site4
                       site3

The "hub" is currently a Cisco, but this is the element I wish to test
using OpenBSD. Basically, I am trying to get around the problem of having
multiple keys on all the "sites" (Cisco's); site1 is supposed to be able
to talk to site2 and site3 etc. This is a royal pain on Ciscos (as you can
only have one "crypto map" per interface).

Anyone?

Best regards,

Tor Houghton