https://palfrepedia.palfreman.com/index.php?action=history&feed=atom&title=IKEIKE - Revision history2026-09-18T12:54:36ZRevision history for this page on the wikiMediaWiki 1.37.1https://palfrepedia.palfreman.com/index.php?title=IKE&diff=654&oldid=prevWilliam: First save2023-09-15T22:46:04Z<p>First save</p>
<p><b>New page</b></p><div>This is about how to set up Internet Key Exchange for [[IPsec]] on OpenBSD<br />
=== /etc/iked.conf ===<br />
<nowiki><br />
ikev2 'responder_rsa' passive esp \<br />
from any to dynamic \<br />
local 21.32.43.54 peer any \<br />
srcid router.int.palfreman.com \<br />
config address 10.1.0.0/24 \<br />
tag "ROADW"<br />
</nowiki><br />
<br />
PF firewall rules:<br />
<nowiki><br />
# IKE<br />
pass in log on egress proto udp from any to (egress) port {isakmp, ipsec-nat-t} tag IKED<br />
pass in log on egress proto esp from any to (egress) tag IKED<br />
pass log on enc0 tagged ROADW<br />
match out log on egress inet tagged ROADW nat-to (egress:0)<br />
</nowiki></div>William