IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
1answer
15 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
-1
votes
1answer
8 views

firewalld: match which zone by policy

I have the following zones that are relevant for this question. SemiTrusted and Public I want to treat IPSEC-encrypted traffic (that is coming from some specific IP addresses) as belonging to ...
0
votes
0answers
10 views

TCP syn, ack Lost Before Entering IPsec VPN tunnel

I have configured a site to site VPN which is working fine as traffic is going through the tunnel. I am able to ping and Telnet hosts on the other network and they are able to ping me back. The ...
0
votes
0answers
33 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
18 views

IPSec Tunnel AWS VPC <-> openSwan CentOS 6.6 Tunnel up, no traffic

I managed to get a tunnel up between a CentOS 6.6 box and our AWS VPC. It shows as connected on the box, and in AWS, but the problem is routing the traffic from the server. Everything I've tried ...
0
votes
0answers
10 views

OpenSwan IPSec tunnel not routing correctly

I am trying to enable site-to-site connectivity between my network and a Windows Azure network. I have configured openswan in the local network and service ipsec status reports that the tunnel is up ...
0
votes
0answers
13 views

IPSec offload in Windows Server 2012 R2 with teaming

I'm interested in exploiting IPSec offloading in Windows. It is for implementing a custom PPP over L2TP/IPSec solution. Microsoft Windows VPN features are not suitable for the task, because I'm ...
0
votes
1answer
20 views

CentOS 7 ipsec hardware rngd erorr

ipsec verify Hardware RNG detected, testing if used properly [FAILED] Hardware RNG is present but 'rngd' is not running. No harware random used! Someone suggest to edit ...
0
votes
2answers
46 views

Strongswan VPN tunnel between two AWS instances won't connect

I am trying to set up a VPN tunnel using StrongSwan 5.1.2 between two Amazon AWS EC2 instances running Ubuntu 14.04.2 LTS. Prior to using StrongSwan, I used open(libre)swan on an Amazon RedHat AMI, ...
-2
votes
0answers
9 views

Windows server cloud hosting with firewall for IPSEC

I am trying to setup a Windows server with an IPSec tunnel to a remote location. First I tried vps.net after a sales person told me it would be no problem. Then it was a problem. So I tried to ...
0
votes
1answer
33 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...
0
votes
0answers
11 views

How does IPSec right=%any setup the SA?

I've seen lots of examples where each gateway in an IPSec is configured with right=%any. I'm perplexed how these gateways find the IP to connect to (assuming both gateways are set up that way). The ...
0
votes
2answers
82 views

Accounting IPSec connections with RSA authentication

Apple iOS has "VPN On Demand" function. With this function the VPN connection is made whenever the device tries to connect to certain domains or to the internet at all. iOS supports "VPN On Demand" ...
1
vote
2answers
83 views

IPSec on OpenVZ multiple ip addresses, using 127.0.0.2 on venet0

I have an OpenVZ box with IPSec enabled. root@wa000:~# ipsec verify Checking your system to see if IPsec got installed and started correctly: Version check and ipsec on-path ...
0
votes
0answers
41 views

strongswan/centos7: Don't get answer from other side (but IPSEC connection seems OK…)

My question: I can't access the other side server to get service, no ping, no telnet working. Is there something wrong on my side? I have problem with Strongswan on centos 7 (compiled version 5.3.2). ...
-1
votes
0answers
23 views

system event notification service fails to connect

Periodically (becoming much more common on one particular machine) a user tries to logon to a computer and gets the error "could not connect to system event notification service". They click ...
1
vote
0answers
28 views

openswan IPSEC site to site randomly disconnects on debian server

goodmorning my friends, this is my situation: I have two debian servers with static IP connected through a site to site VPN OPENSWAN, everything works like a charm, I can ping the entire lan from any ...
0
votes
1answer
28 views

OpenSwan Dead Peer Detection for Mac WIFI clients

I am running an OpenSwan server to facilitate client-server connections into a secure data centre. I have a problem with the standard L2TP over IPSEC client in MacOS, specifically when using WIFI. ...
0
votes
0answers
39 views

L2TP\IPSec PSK server in Windows Server 2012 R2 not working

Im trying to get Windows Server 2012 R2 to work as a L2TP\IPSec PSK server and I feel that Im doing everything correctly but it seems that either it does not authenticate or there is something wrong ...
0
votes
0answers
58 views

Android client to Windows Server 2012 R2 VPN IPSec: Firewall says “No proposal chosen”

Im trying to connect my Android device (5.0.2) to my Windows Server 2012 R2 IPSec VPN but the firewall pops up a error saying "No Proposal Chosen". Ive looked around and it seems the encryption is ...
1
vote
2answers
368 views

IPSec VPN set up (Windows)

I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the ...
0
votes
0answers
34 views

asa5512x: ipsec site-to-site vpn with tcp instead of udp? is it possible?

the cisco documentation for ASA 9.1 (I have 9.1.2) seems to imply that ipsec vpn with tcp/ip is only for remote clients, not site to site vpn. But I repeatedly see people mention vpn over tcp to ...
0
votes
0answers
84 views

VPN to Server 2012R2 with IKE behind NAT

I am having trouble to set up a VPN Tunnel from a Sonicwall TZ 100 to Windows Server 2012R2. I follow the guide from there Configuring a Site-to-Site VPN tunnel in SonicOS Enhanced firmware using ...
1
vote
0answers
45 views

Windows Firewall Connection Security with Certificate (2)

I have a similar problem as the question with the same title from last October. On a Windows Server 2008 machine, using Windows Firewall's Connection Security rules, I need to establish an IPsec ...
0
votes
1answer
40 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
2answers
112 views

iked mutex lock issue

On Ubuntu 15.04, fresh install of the ike package with these requirements installed: cmake libqt4-core libqt4-dev libqt4-gui libedit-dev libssl-dev checkinstall flex bison results in: $ sudo iked ...
0
votes
0answers
93 views

Ubuntu 14.04 Cant connect to openswan/xl2tpd/IPsec VPN via iOS

I am setting up a VPN using openswan, xl2tpd, and IPsec and i am getting issues with connecting via an iOS device with the error "You were disconnected by the communication device". This is configured ...
0
votes
1answer
93 views

Route all traffic through StrongSwan VPN

I'm new to this - please excuse my ignorance. I have looked through many other similar questions to no avail. Trying to set up a StrongSwan VPN such that client C can connect to host H, be assigned ...
0
votes
0answers
36 views

How to forward traffic from ipsec host to local network?

Could anybody explain how to implement forward traffic from host in IPsec to local network. On my server I have 3 network cards: red0 - extern orange0 - dmz green0 - local IPsec builds through ...
0
votes
0answers
130 views

Windows Phone 8.1 client unable to connect to Ubuntu VPN server (L2TP with IPsec)

I have set up an L2TP + IPsec VPN server on my Ubuntu server (14.04.2 64bit) using openswan. I got it working with Android and Windows 8.1 clients, though Windows 8.1 required some tweaking. When ...
0
votes
0answers
41 views

Self Signed Certificate for RDP over Internet - Why Not?

I was recently informed on SF that using a self-signed certificate for RDP over a public interface is not recommended. In this particular scenario, I'd like to understand more about why. The ...
0
votes
1answer
193 views

IPSec VPN Fortigate Phase 2 stuck

Trying to setup a VPN connection to Office Fortigate but I can't pass phase 2. Received info from sysadmins: PSK IKE v1 Aggressive mode Phase1 3DES-SHA1 DH group 5 Key lifetime 28800 XAUTH PAP ...
2
votes
0answers
44 views

Does Windows support IPComp?

The title says it all. I've configured an IPSec IKEv2 connection between a Strongswan server and a Windows 7 workstation and I'd like to use compression if possible. The config on both sides is dead ...
0
votes
0answers
33 views

It is possible to make an IPSEC VPN Bonding?

I wanted to know if It is possible to bound two IPSEC tunnels ? I've already done a VPN bonding of SSH tunnels, but It will be better if I use IPSEC.
0
votes
0answers
48 views

IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer)

I was looking for the difference between IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer) but i can't find something well explained. I'll be glad if someone can ...
-2
votes
2answers
101 views

Networking VPN expert out there? Should Remote VPN “Client” be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
0
votes
1answer
36 views

Quick mode negotiation failed - no policy configured - Windows 2008 R2?

I am establishing an IPSEC Tunnel from my office to Amazon Web Services VPC, using the windows 2008 R2 machine as the "customer gateway". I configured my machine using this guide here. However the ...
0
votes
0answers
196 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
1answer
66 views

IPSEC one way issue

We have a frustrating issue and I'm hoping someone here can see what I'm missing. We have a small hub and spoke network between 4 sites and a datacenter, each location connecting to each other ...
0
votes
0answers
96 views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
0
votes
1answer
58 views

IPSec site to site VPN

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have ...
1
vote
1answer
49 views

Seeing Who is Logged into LibreSwan VPN

We recently setup a LibreSwan VPN and for the most part it is working great. One thing we are having some trouble with is trying to see who is currently logged in. I found a solution for seeing ...
0
votes
0answers
30 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
0
votes
0answers
83 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
10
votes
2answers
246 views

20Mbps WAN limited to 10Mbps over IPSec Tunnel

We recently upgraded a remote site from a 10/10Mbps fibre to a 20/20Mbps fibre link (it is fibre to the basement, then VDSL from the basement to the office, roughly 30 meters). There are regular large ...
0
votes
0answers
53 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
0
votes
0answers
273 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
95 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
34 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
1answer
1k views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...