Re: OBSD2.8 bridge and isakmpd probs

["Angelos D. Keromytis" <angelos@dsl.cis.upenn.edu>]

In message <p05010401b64e187b185f@172.16.0.50>, Paul writes:
>
>Having read the ipsec bridge section of brconfig(8) it would seem as 
>thought I need to associate an SA with the enc1, altho i can't see 
>how that should be done in a bridge configuration. I had assumed that 
>this would be handled by isakmpd but that doesn't seem to be the case.

No, isakmpd still does not handle automated keying for the bridge;
currently, you need to manually setup an SA (via ipsecadm) and then
associate that SA with an enc interface. The IPsec policy code was changed
recently, which is why support for isakmpd+bridge is not in place.
-Angelos