Marcin Cieślak is a user on mastodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

Is it just me or is strongswan & ipsec quite difficult to configure?

Also maybe trying to link my home computer into a 6to4 subnet hosted elsewhere via a ipv4 ipsec tunnel to get around the crummy AT&T internet gateway filtering isn't the easiest place to start.

@alienghic ISAKMP is the worst protocol ever. I usually had to run racoon with a debug level three and there was an online decoder of ISAKMP packet dumps somewhere. Once you get Phase 1 working, Phase 2 won't...

@saper Because the university I work at doesn't have any better ipv6 offerings. 6to4 was easy to set up, and worked really well for making it easier to connect VMs on different hosts in the same corporate network.