[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: VPN and OpenBSD 2.9



> On Wed, Aug 01, 2001 at 10:19:26AM -0600, Mark Gangl wrote:
> > /etc/isakmpd/isakmpd.policy on both gateways is:
> > KeyNote-Version: 2
> > Comment: This policy accepts ESP SAs from a remote that uses the right
> > Authorizer: "POLICY"
> > Licensees: "passphrase:whywontthiswork"
> > Conditions: app_domain == "IPSec policy" &&
> >             esp_present == "yes" &&
> >             esp_enc_alg != "null" -> "true";
> > 
> 
> On Thu, Aug 02, 2001 at 11:58:01AM +0200, Hakan Olsson wrote:
> > Oops. The manual page should not have had _this_ as an example (it's
> > wrong). Sorry about this.

What is wrong with this policy? I don't notice any error.

> On related note, I believe "IPSec policy" here should be "IPsec policy".
> I was playing with isakmpd and found that it's necessary to change the
> line.

Is this the only problem? On the web page, it does say IPsec.