Very Computer

by **Kevin Anthone** » Thu, 14 Feb 2002 05:05:23

I'm trying to set up a VPN for several mobile users, using pre-shared
secrets (for now). I'm attempting to set each user up with a different
pass phrase, but can't figure out how to set up isakmpd.conf to allow
that.

the pass phrases are user1pass, user2pass, etc. I can set up an
[ISAKMP-peer] section for each of them as below:

----------------------
[ISAKMP-peer-user1]
Phase=1
Configuration=mobile-user-config
Authentication=user1pass
Remote-ID=user1-ID

[user1-ID]
ID-Type=USER_FQDN

[...]

[mobile-user-config]
DOI=IPSEC
EXCHANGE_TYPE=AGGRESSIVE
Transforms=DES-MD5
----------------------

The problem is, what do I put in the [Phase 1] section? The IP
addresses are dynamic, so I don't know those, and if I put
Default=ISAKMP-peer-user1, for example, how does user2 connect?

Is it possible to give different users different passwords?

Thanks in advance.

--
Kevin Anthoney

by **John Meye** » Thu, 14 Feb 2002 12:59:13

On Tue, 12 Feb 2002 20:05:23 +0000, Kevin Anthoney

>Is it possible to give different users different passwords?

You do this in policy file, ie, IKE level. If they are allowed into
phase 2, they use the same default or 0.0.0.0 ip for dynamic. You
have to do this yourself to enjoy. man -k isakmp and read all.

Very Computer

isakmpd.conf for multiple mobile users

isakmpd.conf for multiple mobile users

isakmpd.conf for multiple mobile users