Hello BSD world.

I was searching all over google and groups
I am desperated... yhh...

I would like to establish VPN between WindowsXP client
and OpenBSD 3.4 ISAKMP gatewey...

I always recieve INVALID_COOKIE in isamp messages :-(
The config file probably has no typo errors or something like that
because there is also set connectin between two OpenBSD gateways
and it works...

My config is based on some docs from net (OpenBSD <> W2K) but sucks :-(

Please... if You have any experience or documents... please help me :-)

OpenBSD gateway and WindowsXP client.
Probably I will have to do it again from the beginning.
And it is why I am asking You for some advice or help, links, working
configs... etc.

Thanks in advance!
Stempel.

....and some more questions...

Is it true that it cannot be done in simply way
to establish connection to OpenBSD ISAKMP gateway
from Windows client... but from behind a NAT...

Is it neccessary to the client to have Public IP address
to be able to make connection to OpenBSD ISAKMP gateway?

Thnaks once again!
Stempel.

Stempel wrote:
> ...and some more questions...
>
> Is it true that it cannot be done in simply way
> to establish connection to OpenBSD ISAKMP gateway
> from Windows client... but from behind a NAT...
>
> Is it neccessary to the client to have Public IP address
> to be able to make connection to OpenBSD ISAKMP gateway?
>
> Thnaks once again!
> Stempel.
>
>

To answer your first question, I am using SSH sentinel client on
WindowsXP and OpenBSD 3.3 as VPN gateway and it works fine, and
configuration is very simple (I think there is free version of SSH
sentinel for personal use). It even works over GPRS(GSM) networks.

This SSH tunnel is working for me when client is behind OpenBSD NAT, but
not behind WindowsXP NAT (internet connection sharing). WinRoute Lite
NAT (alternative to internet connection sharing, not free) works fine.

If you want vpn between openbsd and windows and require that it works with
client behind nat, you could try installing poptop and use pptp tunnel.
Client software is included in windows so no extra cost there. Setup is also
relative simple.