0
votes
0answers
63 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
1
vote
0answers
40 views

is there any cisco-compatible ipsec+comp module?

I am looking for a waqy to establish an Ipsec tunnel(with lzs-compression enabled) between a cisco router and a host(using strongswan or sth else). I can establish a tunnel without lzs-compression. ...
1
vote
1answer
63 views

VPN Tunnel set up Issues - Cisco WRVS 4400N to Server 2008 R2behind ASA5505

I was wondering if someone could help with a scenario i have that i am not sure how to set up regarding a VPN tunnel set up. I have a Cisco WRVS4400N business router , and on this device , i need to ...
0
votes
0answers
222 views

OpenSwan VPN Connected but can't ping or connect to anything on right side

On my end is an Ubuntu AWS EC2 VM and on the other end is a Cisco ASA 5500 router. Phase 1 and Phase 2 come up but I cannot access anything on the other end. It would seem there's a routing problem, ...
0
votes
0answers
27 views

Can't identify IPSec policy OIDs for Cisco

I'm trying to identify the OIDs of Cisco IPSec tunnel/policy information. Specifically, I would like: the local and remote tunnel addresses (where the tunnel endpoint addresses), the local and ...
0
votes
0answers
74 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
0
votes
0answers
61 views

Need help troubleshooting QuickVPN hang

have QuickVPN 1.4.0.5 on XP Pro SP3 and am trying to connect to a RVS4000 using its public IP address. QuickVPN gets to "Connecting..." and hangs. The context menu on the systray icon won't come ...
1
vote
1answer
447 views

Cisco IPSEC VPN Slow Speeds

We have a site to site IPSEC VPN, both endpoints are Cisco PIX 515e's. The links at both end are 100mb, however speeds over the VPN (logged using jperf) are at most 4mb. Obviously this represents a ...
0
votes
2answers
70 views

Cisco IPSec Hardware Requirements

In order to use IPSec on 2811 and 2651XM Cisco routers, does one need any particular hardware module(s) or just the appropriate software?
1
vote
2answers
85 views

How Can You Tell If IPSec Is Installed on Cisco

How can I tell if my Cisco router has IPSec installed? I went into configuration mode to see about setting up a crypto policy, but the 'crypto' keyword isn't available. Is this an indication that it ...
0
votes
0answers
36 views

simple subnetting, regarding vpn

i am using 2 cisco rv180 to build up a ipsec tunnel. thats working. but i cant get any packets trough the tunnel. first i was using: local: 10.0.0.X 255.0.0.0 remote 10.0.1.x 255.0.0.0 but 0 ...
3
votes
2answers
153 views

VPNs and NetBIOS

I have a Cisco RV180 VPN Firewall Router and I have QuickVPN and PPTP working. However, I am not able to get NetBIOS working so that I can access everything via NAMES or get the systems to show up ...
6
votes
1answer
353 views

Cisco QuickVPN Can't view local computers

I am connected to my QuickVPN connection to my RV180 VPN Router and I can access the router via IP but I can't find or see any of the computers. How can I fix that? Do I need to do some more advanced ...
0
votes
0answers
397 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...
0
votes
0answers
93 views

HTTP and SMB over Cisco LAN-to-LAN IPSec-VPN

we are connecting Cisco 887VA router with various other Non-Cisco routers. VPN tunnels are up and we can ping devices on the remote network through the VPN. However, we have a few devices (on the ...
1
vote
0answers
386 views

How Windows establishes L2TP/IPSEC VPN connection without “IPSec ID” (group id)?

I have a third-party VPN server configured with only 4 credentials given to me: server ip, preshared key, user name and user password. Under Windows 7, i can easily connect to this VPN via standard ...
2
votes
2answers
286 views

Cisco 871: IPsec Remote VPN

After having followed several tutorials and none of them worked for me, someone might help me here. I have a Cisco 871 router, version 12.4(4)T7. Currently, I have it configured as a PPTP VPN ...
0
votes
0answers
377 views

Cisco ASA IPSec Mobile VPN Drops After Inactivity

When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
3
votes
0answers
124 views

Cisco ASA ipsec vs Anyconnect client issue

So I have an iPad that has a IPSec VPN created. I am able to connect from the outside fine and I can access my local LAN files just fine. When I connect with the Cisco AnyConnect client from the same ...
0
votes
1answer
72 views

Cisco IPSec VPN: Multiple address ranges for crypto map?

I'm setting up an IPSec VPN using a Cisco router. The relevant part of the config: crypto map MYVPN 10 ipsec-isakmp set peer 173.1.2.3 set transform-set my-transform set pfs group2 match ...
0
votes
0answers
2k views

IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router

I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER. This is what's the topology looks like: host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2 | ...
0
votes
1answer
157 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
1answer
140 views

Cisco Router ro Router IPSEC config

I have the following configurations, R1: crypto keyring KR pre-shared-key address 1.1.1.2 key cisco ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 crypto isakmp profile ...
2
votes
1answer
287 views

ASA 5505 VPN setup. VPN works but still unable to reach devices in the inside network.

I've setup a Remote Access VPN on my Cisco ASA 5505. I'm able to connect to my ASA via my phone or the Cisco client, but I'm unable to reach devices in my inside LAN when connected via VPN. The ...
1
vote
0answers
1k views

Strongswan configuration to Cisco

We have an issue configuring Strongswan to a Cisco router. The connection is made, but I'm not getting the routing correct. There are multiple networks behind the router on the remote side (operated ...
2
votes
1answer
379 views

Cisco ASA dropping IPsec VPN between istself and CentOS server

Currently we're trying to set up an IPsec VPN between a Cisco ASA Version 8.0(4) and a CentOS Linux server. The tunnel comes up successfully, but for some reason that we can't figure out, the ...
1
vote
0answers
127 views

cisco hub-spoke ipsec vpn, ping between spokes

I have a hub-spoke vpn setup between different locations, Hub: 10.10.10.0/24 A: 192.168.2.0/24 B: 192.168.41.0/24 There is ipsec vpn tunnel between Hub-A, and Hub-B, and the connection is fine. ...
0
votes
1answer
202 views

IPSec Cisco vs Windows Server 2K8 R2

I noticed by RVS4000 is losing performance while IPSec is enabled on the Cisco. Would it be wiser to use the Windows Server IPSec to handle the processing instead? What are the risks/rewards in this ...
0
votes
1answer
158 views

Cisco client to site VPN IPSEC

I've set an EasyVPN on a cisco, when connected to the vpn i'm unable to use internet even the default route is through the tun0 interface created by my VPN client vpnc. Please how to connect to VPN ...
1
vote
0answers
299 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
5
votes
1answer
3k views

ASA site-to-site IPSec vpn to linux ipsec-tools endpoints stops working after a random period of time

We swapped to ASA's over the weekend, and we replaced our VPN infrastructure which was previously based on openvpn and are now using IPSec between our ASA 5520's and our other sites that have linux ...
1
vote
0answers
248 views

Cisco RV220W ipsec with wrong ip packets

I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip. The vpn tunnel is ...
1
vote
0answers
2k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
1answer
453 views

Add Port Forward to ASA5505 with IPSEC Tunnel

I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ...
3
votes
1answer
6k views

StrongSwan ipsec ubuntu “ignoring informational payload, type NO_PROPOSAL_CHOSEN”

I have StrongSwan running on a ubuntu server and I'm trying to create an ipsec encrypted VPN tunnel with a Cisco 2821 router . The connection is not working and I cannot figure out why. It appears ...
1
vote
1answer
755 views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option ...
12
votes
2answers
816 views

What's the protocol-level difference between IPSec and “Cisco IPSec”?

Most VPN clients distinguish between IPSec and "Cisco IPSec." For example, (Apple's) iOS treats them as essentially separate things. But I can't find any explanation of what the protocol-level ...
1
vote
2answers
779 views

How to configure a CISCO ASA to support the OS X VPN Client

Given that OS X now supports (natively) CISCO IPSec VPN connections I am wondering what the requirements for the VPN configuration are on the remote end? I have evaluated a number of CISCO devices ...
0
votes
2answers
1k views

IPsec tunnel keep crashing

I have 2 locations. On each location is installed VPN device Cisco RV042. Link between location is optical fiber. ISP is the same. Link speed on location A is symetric 3/3 Mbps, and there is static ...
2
votes
2answers
3k views

How to force a Cisco 2811 to rekey

We are having a IPsec/GRE VPN tunnel issue at work. Our vendor told me he "forced a rekey" and everything started working again. He alluded to a command to this, but didn't tell me the exact one. Does ...
4
votes
3answers
4k views

How to advertise routes to IPSec tunnels in OSPF using Cisco IOS

I have Cisco 1800 series router (running C181X-ADVIPSERVICESK9-M) with lots of IPSec tunnels. I want to add this router to OSPF and configure it to advertise routes to remote subnets accessible via ...
0
votes
1answer
276 views

Cisco AnyConnect or IPSec user/ip authentication restriction

I'm trying to restrict some users from authenticating and accessing the VPN from home. I have a Cisco ASA5505, they use AnyConnect or IPSec, and I only want them to gain access to the VPN when ...
4
votes
4answers
3k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
1
vote
1answer
896 views

OSX 10.6 Cisco IPSEC strange behavior

I'm trying to connect to Cisco IPSEC VPN of my company over DSL Internet. I managed to successfully connect using Cisco VPN Client, now I'm trying to switch to OSX 10.6 native client, because of ...
0
votes
1answer
1k views

LAN to LAN (Tunnel) VPN with IPSec

I'm having some issues setting up a LAN-to-LAN VPN. Please keep in mind, that "the other side" won't change anything in their configuration. This is my current setup: Our side: Router: Draytek 2820 ...
5
votes
2answers
560 views

ScreenOS ip6in4 tunnel over transport mode ipsec?

I have setup a point to point transport ipsec session between a ScreenOS router (SSG-5) and a Cisco 3925. The ipsec transport itself works great, but as soon as I try to direct the protocol 41 ...
1
vote
2answers
1k views

Cisco IPSec, nat, and port forwarding don't play well together

I have two Cisco ADSL modems configured conventionally to nat the inside traffic to the ISP. That works. I have two port forwards on one of them for SMTP and IMAP from the outside to the inside this ...
1
vote
4answers
7k views

Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN

I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...
0
votes
1answer
345 views

Configure Cisco 871W to connect to VyperVPN

How can I configure my Cisco router to router certain traffic (IP or domain-based) through a VyperVPN connection? VyperVPN uses IPSec: http://www.giganews.com/vyprvpn/setup/mac/l2tp.html Sample ...
0
votes
2answers
295 views

Can I hook a firewall inside a network and VPN connect to another network?

I'm wondering what I'd have to do to make the following scenario possible: _____________ __________________ | | | | | Network A | | Network ...