Setting up an OpenBSD vpn

I've tried to make a vpn between 2 OpenBSD 3.5 servers with isakmpd/ipsecadm. These are the steps that i've followed:

1. sysctl forwarding + ah/esp
2. ipsecadm tunnels
3. isakmpd.conf/isakmpd.policy
4. firewall configuration

...but with no success.

Can somebody help me?

What exactly is the problem you're getting, is it during the session setup or after the session has been setup..... is there a NAT device between the two boxes anywhere ?

Hi

This is not an answer post; But just thought of posting here

Use OpenVPN openvpn.sourceforge.net/

Regards
- Cheetah

I think that the problem is in the session setup. Though the 2 servers are listening on udp 500 (isakmpd) im not able to ping the remote LAN ip's.

LAN_A ---- OBSD_A

---

INTERNET

---

OBSD_B ---- LAN_B

LAN_A 192.168.100.0/24
OBSD_A interfaces: INT_IF=192.168.100.1
EXT_IF=123.123.123.123

LAN_B 192.168.110.1/24
OBSD_B interfaces: INT_IF=192.168.110.1
EXT_IF=213.213.213.213

In the `cat kernel/ipsec` arent made any Security Associations.

have you tried sniffing the session setup phase and finding out whats happening