Comments on: VPNs - why so difficult? http://www.geekandi.com/2006/04/23/vpns-why-so-difficult/ an embellishment Wed, 19 Nov 2008 23:44:22 +0000 http://wordpress.org/?v=2.6 By: videoman http://www.geekandi.com/2006/04/23/vpns-why-so-difficult/#comment-12 videoman Thu, 04 May 2006 17:06:57 +0000 http://www.geekandi.com/2006/04/23/vpns-why-so-difficult/#comment-12 I have spent hours, upon hours, (upon more hours) trying to get Goofy Windows ISAKMP/OAKLEY setups to talk to OpenBSD. It was an pain, and it never fully work, EG: IKECFG should push DNS/Vitural IPs/WINS to the client, but that never worked across installs. Long story short- I developed a process to create PKCS12 files for SafeNet and OpenBSD with ISAKMPD, abandoned that, and move to OpenVPN and PKCS12 files, and it just works! Hours burned on trying to get windows and ISAKMPD to work: 120 (yes, It was that bad) Hours burned setting up OpenVPN: 2-4, and it just worked! Mind you, site to site VPN using OpenBSD just work as well, and they work great! I have spent hours, upon hours, (upon more hours) trying to get Goofy Windows ISAKMP/OAKLEY setups to talk to OpenBSD. It was an pain, and it never fully work, EG: IKECFG should push DNS/Vitural IPs/WINS to the client, but that never worked across installs.

Long story short- I developed a process to create PKCS12 files for SafeNet and OpenBSD with ISAKMPD, abandoned that, and move to OpenVPN and PKCS12 files, and it just works!

Hours burned on trying to get windows and ISAKMPD to work: 120 (yes, It was that bad)
Hours burned setting up OpenVPN: 2-4, and it just worked!

Mind you, site to site VPN using OpenBSD just work as well, and they work great!

]]>