VPN: OpenBSD/isakmpd OS X/Internet Connect (racoon?)

[Anonymous]

I’m having a bit of trouble getting OS X to connect to my OpenBSD router’s VPN connection. It gets past phase 1, but at phase 2, all four of the proposals for the QUICK_MODE method get shot down (isakmpd says “025552.284056 Default check_policy: negotiated SA failed policy check” four times and then “025552.301823 Default message_negotiate_sa: no compatible proposal found
“, and the packet capture says that there’s four proposals for the SA policy, so it matches. Here’s the relevant section of my isakmpd.conf file, which I’ve specifically matched to the proposal:

-snip-

[Default-quick-mode]
DOI = IPSEC
TRANSFORM_ID = AES
ENCAPSULATION_MODE = TRANSPORT
EXCHANGE_TYPE = QUICK_MODE
LIFE_TYPE = SECONDS
LIFE_DURATION = 3600,60:86400
AUTHENTICATION_ALGORITHM = HMAC_SHA

-snip-

Any suggestions? Anyone else able to connect OS X to OpenBSD?

Thanks,
David

[Author]

Posts