On 2008-09-05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> I have two questions, one trivial *blush*: How can I search the
> archives for one or a combination of keywords?

search.gmane.org has a few more search options than most of the
archives (you can do "and" queries, for a start...). it's associated
with a mail-to-news gateway, search group "gmane.os.openbsd.misc"
for [EMAIL PROTECTED]

> Question a: So, do I need to configure an iskmpd.conf file, yes
> or no?

probably not for this.

start by configuring things to encrypt traffic between your wireless
and wired subnets. this is straightforward with ipsec.conf (on the
router it can be as simple as something like "ike passive esp from
192.168.40.0/21 to any") and what you learn there will help when
you want to handle other traffic.

> Or is it all in ipsec.conf "in a much simpler format", and
> where does ipsec.conf(5) describe this syntax?

it's a pf.conf-like syntax, there are lots of example lines
in the manual page ipsec.conf(5).

ipsecctl converts it to isakmpd.conf style configuration;
you can see this with "ipsecctl -nvf <filename>" which may give
you a handle on how it works if you've been reading about
isakmpd.conf, alternatively if you find you need something
that ipsecctl/ipsec.conf can't quite do, this can get you
most of the way towards a useful isakmpd.conf.

Reply via email to