Openbsd-ipsec-gif

Background

• Please see IPSEC-Racoon for background.
• There are very few differences that will be annotated here.

Remote Settings

• You will be able to mirror the settings laid out in IPSEC-Racoon except for a handful of things.
• Encryption Algorithm should be aes.
• The SPDs are the same format for racoon.

Config Files

ipsec.conf

• This actually is a one-liner:

 ike esp from XXX.XXX.XXX.XXX to YYY.YYY.YYY.YYY psk "MYPRESHAREDKEY"

Execution

• To run, try this:

 # isakmpd -K -v -D A=80
 # ipsecctl -f /etc/ipsec.conf

• Make sure your firewall isn't blocking the traffic.