No Proposal Chosen is the worst error in networking. A guide to standardizing IKEv2 IPsec between MikroTik and Cisco, with subnets and IPs that finally work.
#networking #vpn #ipsec
@hugovalters.bsky.social
@hugovalters.bsky.socialNo Proposal Chosen is the worst error in networking. A guide to standardizing IKEv2 IPsec between MikroTik and Cisco, with subnets and IPs that finally work.
#networking #vpn #ipsec
@brynet.caSpurred by a report by Franz Bettag, Theo de Raadt has shared some interesting commentary on isakmpd(8), OpenBSD's older IKEv1 protocol daemon.
Users are advised to switch to better options such as IKEv2 iked(8) if possible.
@hugovalters.bsky.socialSite-to-Site IPsec: Connect Offices Without Losing Sleep — hands-on guide for sysadmins. #ipsec #networking #vpn
@solideinfo.bsky.socialOptimize IPsec tunnels with SD-WAN and ZTNA — learn how zero trust network access reshapes enterprise security beyond traditional site-to-site VPN.
@solideinfo.bsky.socialLearn how an IPsec tunnel is deployed in production — NAT traversal, site-to-site setup, and securing LDAP/Kerberos traffic.
#solideinfo #ipsec #networksecurity #cybersecurity #packprotv #solidpax
@hugovalters.bsky.social"No Proposal Chosen" between MikroTik and Cisco ASA? Standardize IKEv2 for site-to-site IPsec without the log-buffer nightmares. https://www.valtersit.com/guides/networking/site-to-site-ipsec-connecting_offices_without_losing_your-mind/ #networking #ipsec #vpn
@firstpasslab.bsky.socialML-DSA changes Cisco IKEv2 authentication -and makes IKE_AUTH much larger. Review the packet and PKI implications. See CCIE Security · Practice and its current price: https://commerce.firstpasslab.com/buy/ccie-security-lab-practice?ref=bsky #CCIE #IKEv2 #IPsec #PQC #NetSec
@firstpasslab.bsky.socialML-DSA lab tip: capture the transit path and separate IKE_SA_INIT, IKE_INTERMEDIATE, and IKE_AUTH. Certificate growth lands in IKE_AUTH. See CCIE Security · Practice: https://commerce.firstpasslab.com/buy/ccie-security-lab-practice?ref=bsky #CCIE #IPsec #IKEv2 #PQC #Packets