Re: ISAKMPD VPN w/ Cisco Concentrator

[Toni Mueller <openbsd-misc_(_at_)_oeko_(_dot_)_net>]

Hi Paul,

On Wed, 23.03.2005 at 12:28:17 -0500, Paul Lussier <p_(_dot_)_lussier_(_at_)_comcast_(_dot_)_net> wrote:
>    Authentication ESP/MD5/HMAC-128

> Should 'Athentication' above be AUTHENTICATION_METHOD in isakmpd.conf?

this would translate to

HASH_ALGORITHM=         MD5

because there is no way to specify a key length with MD5 in isakmpd.

I have a connection to a Cisco VPN concentrator running nicely.
Be sure to use at least OpenBSD 3.6.

> And what does 'IKE Proposal' mean?  I couldn't find anything that
> seemed to match up with that in the isakmpd.conf man page.

Read something about how IPSEC works.


Best,
--Toni++