Encriptar disco

Configuracin red Miniux en SO OpenBSD

Editar el archivo /etc/isakmpd/isakmpd.conf si no existe lo creamos

#
# isakmpd.conf
#
[General]
Retransmits=
Exchange-max-time=
Listen-on=
Check-interval=

5
120
192.168.110.1
1

[Phase 1]
# remote client (road) has dynamic IP addressing
Default=
road
[Phase 2]
# passive connection between client and server
Passive-Connections=
core-road
[road]
# phase 1: exchange authentication informations
Phase=
1
Transport=
udp
Local-address=
192.168.110.1
Configuration=
Default-main-mode
Authentication=
secret
Default=
core-road
[core-road]
# phase 2: establish the connection
Phase=
2
ISAKMP-peer=
road
Configuration=
Default-quick-mode
Local-ID=
Net-core
[Net-core]
# local net addressing
ID-type=
Network=
Netmask=

IPV4_ADDR_SUBNET
0.0.0.0
0.0.0.0

[Default-main-mode]
# declare our main mode
DOI=
EXCHANGE_TYPE=
Transforms=

of operation
IPSEC
ID_PROT
3DES-SHA

[Default-quick-mode]
# declare our quick mode of operation
DOI=
IPSEC
EXCHANGE_TYPE=
QUICK_MODE
Suites=
QM-ESP-3DES-SHA-PFS-SUITE

Editar el archivo /etc/isakmpd/isakmpd.policy si no existe lo creamos

KeyNote-Version: 2
Comment: IKE policy v3.0 (road warrior VPN)
Authorizer: "POLICY"
Licensees: "passphrase:secret"
Conditions: app_domain == "IPsec policy" &&
esp_present == "yes" &&
esp_enc_alg != "null" -> "true";

activar isakmpd despues de reiniciar:

# echo 'isakmpd_flags=""' >> /etc/rc.conf.local