IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

0
votes
1answer
15 views

Connecting my Cisco router to Azure with IKEv2

I'm trying to set up a site-to-site VPN between a Cisco RV130W router and Azure. The terminology Cisco uses seems to differ from that of Azure, and I'm confused. First of all, I can't figure out if ...
0
votes
0answers
12 views

Ipsec with public encryption domain?

my partner require a public encryption domain for an ipsec tunnel. With this configuration: IP address: A.B.C.7/32 Encryption domain: A.B.C.128/25 My question is: if all my traffic is tunneled ...
0
votes
0answers
13 views

IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side

I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
0
votes
0answers
13 views

Building a meshed overlay network with outgoing connections going through a gateway

I rent a few Linux servers and the provider doesn't offer a VLAN. Each server gets a public IPv4 address, which are not part of the same subnet. I would like to create a network which "hides" the ...
0
votes
0answers
37 views

how to disable ipsec when configuring l2tp vpn server in windows server 2008?

Is there a way to configure Windows server as a traditional L2TP server without having IPsec? I have tried add ProhibitIpSec in Windows' registry, it doesn't work, client report error 741. Have ...
0
votes
2answers
60 views

VPN Client connection drops when second user connects

My customer is using a NETGEAR FVS338 for internet access and s2s-connectivity for his two locations, which works flawlessly. He (and a couple of his employees) also use the ShrewSoft VPN software ...
0
votes
0answers
39 views

How to fix failing connection to VPN(ipsec+ikev2)?

Auth made with certificates ubuntu 16.04 + strongswan. Client connecting from win7, certificate was added like said in strongswan Wiki. Config made also like in strongswan wiki, but i got error: '...
1
vote
0answers
30 views

Cisco ASA VPN DH Groups for AWS VPC

AWS provides a neat function in its VPC that exposes a VPN service. I've configured this, and confirmed that it functions. Our customer is using a Cisco 5500 Series ASA appliance to connect to the ...
0
votes
0answers
12 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
0
votes
0answers
27 views

L2TP gives error 410 on attempt to connect to VPN

I'm getting error 410 while trying to connect via L2TP. This error occurs very often, but sometimes I'm able to connect, which leads to a fact that I configured everything properly. I have Ubuntu 14....
1
vote
1answer
33 views

Protecting wired LAN from packet sniffers

How one encrypts traffic in wired LAN segment? Can IPv6 in combination with IPSec be configured for IKE/ISAKMP authentication? OR Will I drown in configuring appropriate IKE host-to-host rules for ...
0
votes
0answers
12 views

OpenSwan IPsec VPN server not responding to remote router DPD packets

We have setup a IPsec connection, on an Ubuntu server, with OpenSwan IPsec implementation (version U2.6.38/K3.13.0-24-generic). The connection establishes successfully, but around a minute later (...
0
votes
0answers
12 views

L2TP and Openswan NAT

I have a connection between a local CentOS7 machine and a remote customer server connected via L2TP. I can communicate CentOS7 <--> Customer flawlessly, but the problem begins when I try to ...
0
votes
0answers
24 views

IPsec with EC2 client and Elastic IP, but nat_traversal=no

After researching this quite a bit, I feel I may be asking the impossible here, but I thought I'd give it a shot. I'm trying to configure an Openswan IPsec client on an EC2 server (inside VPC, if it ...
0
votes
0answers
20 views

“The session has been cancelled” in Windows Firewall IPSEC

I have a bit of a head scratcher. For some reason a couple of my 2012r2 boxes aren't able to establish Quick Mode connections. Main mode is established just fine. This only happens after the ...
0
votes
0answers
70 views

IPSEC passes only ICMP

I have FreeBSD and Mikrotik with IP 1.1.1.1 and 2.2.2.2. Local subnets are 192.168.1.0/24 and 192.168.2.0/24. Firewall is disabled for testing. I am bringing up gre tunnel between them. FreeBSD: ...
0
votes
0answers
17 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
1
vote
1answer
52 views

Azure vpn is establish but causing delay or no traffic sometimes

We are trying to establish VPN Hillstone FW (device) with Azure. VPN details are: VPN type: Policy based Gateway Subnet: 192.168.50.10/29 default subnet: 192.168.50.0/29 VM inet Address: 192.168.50....
0
votes
0answers
13 views

IPSEC VPN point-to-site connection works but remote network is not rechable

I have a probelm with ipsec configuration. I have to connect to remote network (client! to site), where is Fortigate firewall. On left side (where I have access, this is my dedicated server), I have a ...
0
votes
1answer
110 views

Connecting to a FortiGate VPN from a remote Linux machine via OpenSwan

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem ...
0
votes
0answers
70 views

IPSec VPN between Fortigate 5.2 and Linux with ipsec-tools - data does not pass

We have an IPSec VPN tunnel between Fortigate device and Linux box running racoon and ipsec-tools. The setup worked in Fortigate 4.X, but with 5.2 the SAs are negotiated OK and no traffic can be ...
0
votes
1answer
15 views

IPSEC VPN site-to-“alias”

I am trying to connect my CentOS (CentOS release 6.7) server to a 3rd party VPN so traffic can be routed between my Apache instance listening on an aliased private IP (192.168.253.1), through the ...
0
votes
1answer
126 views

How to enable debug logs in OpenSwan?

I use OpenSwan IPSec tunnel on CentOS 6.7. I have added the following configuration in /etc/ipsec.secrets according to this link: http://linux.die.net/man/5/ipsec.conf config setup plutodebug=all ...
1
vote
1answer
109 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
0
votes
0answers
31 views

IPSec - Is it possible to have remote access clients (road warriors) all behind the same NAT device?

This is a topic that I find mixed information on. Is it possible to have two IPSec road warriors that are behind the same NAT, even with an ASA as the VPN endpoint? I have been trying with Libreswan ...
0
votes
1answer
32 views

How do I route traffic over the a tun0 device (IPSec VPN connection)?

I've set up an IPSec VPN tunnel between my laptop and work. The tunnel gets established, but routing does not. The relevant part of ifconfig is : eth0 Link encap:Ethernet HWaddr d4:be:d9:6f:a7:...
0
votes
0answers
84 views

Forwarding UPnP, DLNA traffic via computer to server

I'm about to tear out what is left of my hair with this. I was able to finally see traffic coming through, but not working in full, when using socat but this setup is not ideal. The idea: I have a ...
0
votes
0answers
66 views

Two road warrior clients behind the same NAT device (IKEv2, StrongSwan, LibreSwan)

I have an IKEv2 VPN that is set up and works properly, however I run into issues when I have two road warriors behind the same NAT device. Both devices connect however the second device seems to kick ...
1
vote
0answers
123 views

ipsec: Can't authenticate: no preshared key found for

I'm using Openswan with ipsec and ipsec keeps complaining about the shared-key not being present. I'm running Ubuntu 14.04 . I'm just experimenting on a couple of internal systems since I'm new to ...
0
votes
1answer
54 views

Why does 'ipsec statusall' not show any connections?

I've finally been able to get a tunnel between my computer (strongswan) and a Zyxel Zywall 110 up and running. I'm connecting using certificates, and judging from the logs the actual VPN connection ...
0
votes
0answers
32 views

Is IPSec + L2TP doable on Ubuntu 14.04?

We just got a new firewall, and our old PPTP VPN has been replaced with a new IPSec + L2TP VPN. Setting up VPN connections for Windows + Mac users is a breeze. Getting it to work on Ubuntu is hard (at ...
0
votes
0answers
39 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
1
vote
1answer
41 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
23 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
16 views

IPsec tunnel, receiving data with wrong destination address

I've managed to stablish an IPsec tunnel using strongswan to a Cisco router. My server is an Azure VM, so it is behind NAT. I do not have control over the Cisco router. This is my /etc/ipsec.conf: ...
0
votes
0answers
111 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
1
vote
0answers
28 views

L2TP/IPsec with certificates: INVALID_KEY_INFORMATION

I'm trying to configure a L2TP/IPsec client on Centos 7, the packages are: libreswan-3.15-5 xl2tpd-1.3.6-8 The server is MS Windows I cannot bring up the vpn. Error are as follows: ● ipsec....
1
vote
1answer
52 views

How to redirect traffic through IPv6 IPSec (strongswan) gateway?

I'm trying to set up IPSec secured connection to the gateway. Have three hosts: A: eth1 - fec0:1::1/64 B: eth1 - fec0:1::2/64 eth2 - fec0:2::2/64 which is gateway between A and C; forwarding is set ...
1
vote
0answers
15 views

AnyConnect on ASA5520 licensing required? [duplicate]

longtime reader, first-time poster. I'm currently working in a small shop and I am new to the Sys Admin role. We pay our ISP a lot for our VPN and we are looking for a different provider. We are ...
0
votes
0answers
82 views

How to debug issues with IPSec VPN using Shrewsoft's VPN client

I am trying to connect (from an ubuntu machine) to a IPSec VPN with pre-shared key using Shrewsoft's VPN (ike) client (just because there is an exported configuration for this client available, there ...
0
votes
0answers
26 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
0
votes
2answers
115 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
0
votes
1answer
92 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
1
vote
0answers
16 views

IPsec and pinging rightsubnets

I have been racking my brain about this. I have openswan running and I have been able to get tunnels up. Unfortunately, when I try to ping computers on my right subnet, I am not able to get any ...
0
votes
1answer
146 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
0answers
130 views

OpenSwan VPN IPSEC Tunnel Connection

I was hoping this website would be able to help with solving this issue since I've been running in circles on my end! I am using OpenSwan to setup an IPSec tunnel between a VPN server on Rackspace ...
0
votes
1answer
90 views

PFSense IPSec and NAT

Due to bad design and hosting provider constraints I have a network where I don't control the router. Our network: 172.16.0.0/12 - LAN x.x.x.0/24 - WAN (Router is connected to the switches, we have ...
2
votes
0answers
39 views

Dual path VPN on ASA 9.2

We have two sites that are joined by a VPN over two WAN links, one primary and one backup only. The VPN endpoints are a pair of active/standby ASA clusters at each site. Each site also has multiple ...
0
votes
0answers
80 views

IPv4 over IPv6 IPsec tunnel

I've got two Cisco 2811 routers, both with a global static IPv6 adress, and an IPsec tunnel between them (using VTIs). Is it possible to send IPv4 traffic over this tunnel? The relevant parts of the ...
1
vote
0answers
28 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...