IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
0
votes
0answers
9 views
Racoon IPSec between 2 networks - wrong routing in one direction. How to debug/fix?
I am trying to connect a VPN router (situated behind an NAT router) to a linux server (firewall, public ip) via IPSec. The linux server uses racoon.
The VPN connection seems to be up and running, ...
0
votes
1answer
14 views
Interaction of IPSec and WinPE in MDT 2010 sequence
I'm in the process of enabling IPSec and Windows Advanced Firewall within my organization.
We are also using MDT 2010 for OS deployment.
This is the first time I've tried a new sysprep and capture ...
1
vote
1answer
21 views
Does Juniper ScreenOS support IPCOMP?
Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
1
vote
1answer
20 views
Routing Asterisk traffic evading a VPN
I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
-3
votes
0answers
28 views
How to log VPN traffic? [closed]
I have the following services running:
root 780 1 0 May18 ? 00:00:00 /usr/lib/ipsec/starter
root 782 780 0 May18 ? 00:00:00 /usr/lib/ipsec/pluto --nofork --uniqueids ...
0
votes
0answers
12 views
Use ipsec-tools with pre-shared key for windows client?
I want to setup a ipsec server with ipsec-tools for my windows client with pre-shared key, it's OK to setup it, but I want to a anonymous access to the ipsec server with my windows client, I mean my ...
0
votes
2answers
45 views
what does “openssl FIPS mode(0) unavailable” mean?
I compiled and installed strongswan ipsec vpn successfully, as demonstrated by the fact that the service starts successfully:
as3:~# ipsec restart
Stopping strongSwan IPsec...
Starting ...
1
vote
1answer
29 views
How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?
I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites.
Existing:
[10.1.0.2...] = source client
|
[10.1.0.1 ASA ...
0
votes
2answers
48 views
Can IPv6 IPSec replace https/ssl for secure website network encryption?
Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.)
Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
1answer
30 views
Howto enable IPSec with IPv6 automatically?
Although IPSec is included in the IPv6 protocol, this doesn't mean that it gets actually used.
I know how I could create a VPN manually via e.g. racoon or any other VPN-Server software, but that's ...
0
votes
0answers
29 views
Cisco ASA IPSec Mobile VPN Drops After Inactivity
When I connect to my Cisco ASA 5510 via the built in IPSec VPN on my ipad (over both 3G and Wifi) the connection drops without error (the icon just disappears once I go into settings to check on time ...
-1
votes
0answers
11 views
Difference connection security rules and IPSEC [closed]
I'm havin diffuculties seeing the difference between setting connection security rules (translated correct? I'm using a localized version) in a GPO or setting up IPSec in said GPO.
As I can basically ...
2
votes
0answers
30 views
Cisco ASA ipsec vs Anyconnect client issue
So I have an ipad that has a IPSec VPN created, it connects from the outside and I can access my local lan files just fine. Now when I connect with the Cisco AnyConnect client from the same device it ...
0
votes
0answers
65 views
Site-to-site VPN between Azure Virtual Network and a Cisco RV016
I'm attempting to configure a Cisco RV016 router to connect to an Azure Virtual Network to create a site-to-site VPN, but it's not working.
I'm aware that a Cisco RV016 is not in the list of ...
0
votes
1answer
14 views
Cisco IPSec VPN: Multiple address ranges for crypto map?
I'm setting up an IPSec VPN using a Cisco router. The relevant part of the config:
crypto map MYVPN 10 ipsec-isakmp
set peer 173.1.2.3
set transform-set my-transform
set pfs group2
match ...
0
votes
0answers
20 views
IPSec configuration between a (Cisco) routed network and a (Racoon) NATed network?
I am trying to set up the following WAN configuration:
Both interfaces on the router at the datacenter connect to public networks. However, our office is behind a standard cable modem and is ...
1
vote
0answers
35 views
IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat
I have recently configured a VPN server hosted in AWS EC2.
Details: Centos 6.4, openswan, xl2tpd, NAT-traversal.
The configuration works great for a scenario when only one user connects form a given ...
0
votes
0answers
35 views
How can I make racoon verify peer certificates?
I am attempting to set up IPSec on my LAN using automatic key setup with racoon using PKI for authentication.
Each of my host certificates has the host's FQDN as the Common Name with the FQDN and IP ...
1
vote
2answers
71 views
Openswan tunnel up, but works only in one direction
I've successfully established an IPsec connection, but it works only partially. One side does not send out packets through the tunnel. It seems as if the network topology is unclear to this side.
...
0
votes
1answer
80 views
Does Windows Server 2008 R2 firewall ipsec tunnel encapsulated data in one port?
Today I have the following setup:
All my servers are located in the internet, they are protected by Windows Firewall and Advanced Secutiry using IPSec with certificate. It includes the Domain ...
0
votes
0answers
25 views
How can I add encryption to a GRE tunnel?
I'm using a GRE tunnel on a few Ubuntu servers to join multiple AWS regions in separate VPCs into one internal network to reduce the number of IPs I need, as well as network complexity.
Right now, my ...
0
votes
0answers
61 views
Finally get my win 7 connected to strongSwan VPN, but there's no Internet
I believe I've followed all the instructions, and my win 7 did get connected, but there's no Internet.
Background:
Server OS: ubuntu 12.04 on linode xen VPS
strongSwan Version: 4.6.4
...
0
votes
2answers
66 views
How does VPN software 'hijack' packets for tunneling?
My current mental model
An application interacts with the operating system to produce an OSI model stack-based packet process - subsequent layers of encapsulation
Somewhere along the line before the ...
0
votes
1answer
116 views
Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]
Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue?
I have tried enabling and ...
0
votes
1answer
21 views
Can't setup IPSec policy for LDAP
I'm trying to setup IPSec policy for TCP port 389 that only allow limited group of IP address to connect. (The target machine was a domain controller.)
So I added two filters,
one to deny all ...
0
votes
1answer
202 views
Pfsense 2.02 ipsec vpn tunnel goes down randomly
Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this.
These are the logs:
racoon: ...
0
votes
0answers
111 views
IPsec site-to-site tunnel config
I'm completely lost as to how to why this doesn't work. I can't ping, much less reach resources on the other side. Here's my configuration:
Site 1
Public IP: A.A.A.A
Private network: 10.8.6.0/24
...
1
vote
1answer
120 views
VPN with xl2tpd and racoon - how to NAT traffic out of non-default IP address
I have a server running Debian which has networking like this:
eth0 - has public IP address 1.2.3.4
eth1 - has public IP address 1.2.3.5
I'm trying to set up a VPN on the server which I can connect ...
1
vote
0answers
43 views
Running a VPN server and a captive portal on the same machine with a DNS too
I don't know if this can be done but I'm asking anyways.
Let's say that I've an Ubuntu machine with OpenSwan and xl2ptd to handle incoming VPN connections.
Now, what I need to do is something like ...
0
votes
1answer
47 views
IPsec with various subnets on one side
I have the following situation:
Client subnet(192.168.0.0 /24) ----> Router ----> Internet ---->
ASA(172.17.0.2 /24) ---->
(172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
1
vote
0answers
49 views
Windows Advanced Firewall - adding Authorized Computers breaks rule
How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity?
Background:
I'm setting up a basic set of client rules that restrict ...
1
vote
0answers
33 views
List of valid Vendor ID in Vendor ID payload
I have some logs from a VPN with lines like this one:
Ignoring Vendor ID payload [4a131c8107035845...]
Can I use the hexadecimal code there to identify what kind of hardware attempted to establish ...
1
vote
1answer
86 views
IPSec L2L Failover between two pfSense devices
Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
0answers
97 views
How to publish routes to the IPSec/L2TP client with nodefaultroute option specified
I would like to be able to have IPSec / L2TP clients that connect without setting a default route to the tunnel to be able to receive the internal routes of the network they are connecting to.
...
0
votes
0answers
445 views
IPSEC Tunnel with OpenSwan on Ubuntu <-> CISCO Router
I have setup a tunnel between a UBUNTU SERVER linux box and a CISCO ROUTER.
This is what's the topology looks like:
host 1 ------ UBUNTU SERVER IPSEC <---> CISCO ROUTER ------ host 2
| ...
1
vote
0answers
41 views
Can I make Windows 7 process the IPsec INITIAL-CONTACT message?
Windows 7 seems to ignore the IPsec INITIAL-CONTACT notification described in RFC 2407. Is there a setting to make it process the message? When Windows receives the notification, it should delete its ...
0
votes
0answers
57 views
IPSec VPN routing
This is supposed to be a pretty simple question but I couldn't google a answer for it!
I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
0
votes
0answers
131 views
IPsec VPN connection drops automatically every 47 mins [closed]
I'm using Cisco Systems VPN Client Version 5.0.07.0440 to connect to VPN server through IPSec/UDP.
Btw, the OS is win 7 ultimate 64 bit
The problem is each time when it connects, I always got such ...
0
votes
0answers
78 views
VPN connection stalls on SCCRQ send
So, I have an L2TP over IPSec VPN server running on my mac at home. Only problem is that none of my devices seem to be able to connect to it. All of the other services are running and reachable, its ...
0
votes
0answers
549 views
Openswan and Cisco ASA site-to-site VPN stuck on Pending Phase 2
I received a list of commands that were run on the right side of the VPN tunnel which is where the Cisco ASA resides. On my side, I have a linux based firewall running debian with openswan installed. ...
0
votes
1answer
148 views
Router with multiple incoming IPSec VPN Tunnels?
We currently have a Draytek Vigor 3200 Multi-Wan router which has 5 incoming VPN tunnels using IPSec AES encrypted configurations. All five sites are using Draytek Vigor routers, most are Vigor ...
0
votes
0answers
91 views
IPSec port blocking rule doesn't block packets? (Windows 7)
I'm trying to set up an IPSec rule in Windows 7 to block UDP traffic on a specific port (31069 in this example) on a particular network interface. (The plan is to allow it on a secondary NIC, but for ...
0
votes
2answers
55 views
Is an IPSEC tunnel limited to the slowest direction of an asynchronous connection?
If I am running an IPSEC tunnel over an ADSL connection with bandwidth limits 2mbps down and 1mbps up is the bandwidth over the tunnel limited to 1mbps in both directions or is it also asynchronous?
...
1
vote
0answers
175 views
Android devices fail to connect to MS L2TP PSK
I have configured MS Server 2003 RRAS with IPSec / L2TP using PSK. iPhone devices connect fine however Android devices fail to connect. The MS "Oakley" trace file shows the negotiations for Apple and ...
0
votes
1answer
53 views
Configuring IPSec
If you look at my previous question, you'll see that I have two IP Addresses (for the remote device), to configuring our VPN Tunnel:
VPN Device Tunnel Endpoint IP Address: 91.151.a.b
Host(s): IP ...
2
votes
2answers
1k views
Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)
I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one.
However, my ...
0
votes
1answer
454 views
VPN tunnel via IPSec
I'm not so familiar with installing and configuring VPN connections, but I need to link up our web server (CentOS 6) to a Cisco 3945. Here is the information I have from the Cisco device:
VPN Device ...
1
vote
0answers
419 views
Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN
The issue
I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
1
vote
1answer
278 views
ipsec vpn with racoon drops traffic on phase 1 renegotiation
We are running racoon on Linux connecting to a Checkpoint firewall. The connection comes up fine, but we see an interruption to traffic every 24 hours, corresponding to Phase 1 regenogiation.
Our ...
0
votes
1answer
63 views
EasyVPN vs Site to Site VPN bandwidth use
We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
