IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.
2
votes
0answers
14 views
Sending L2tp/IPsec PSK client packets to OpenSwan server
I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the ...
0
votes
0answers
12 views
Using TMG IPSec Site-2-Site to send packets to networks other than Internal
We have two TMG servers set up with an IPSec Tunnel between them and can connect fine between the two internal networks.
Each TMG server has 3 NICs
Internal
External
DMZ
The problem I have is I ...
1
vote
0answers
22 views
netfilter: How to mark packet by reqid?
I have the following problem. I have SAs that use firewall marks. So only packets that have that mark get encoded and decoded.
I managed to set the mark for packets that shall be encoded but I cannot ...
0
votes
0answers
24 views
IPsec-tools racoon configuration
I have cross compiled ipsec-tools for arm and wanted to establish a secured communication between host machine and arm using ipsec-tools.I wish to set the SAs automatically.So i opted for racoom.
This ...
3
votes
1answer
30 views
terminate ipsec transport at firewall?
I am exploring using ipsec transport mode to provide secure ipv6 access between 2 LANs and several remote users. I love the combo of a flat ipv6 global unicast address space combined with ipv6 ...
1
vote
0answers
29 views
Opportunistic encryption with StrongSwan
I've been struggling with StrongSwan for a couple of days trying to get it do something like Opportunistic encryption. I've read a few places that it should be able to do it, but haven't been able to ...
0
votes
1answer
224 views
IPsec VPN site-to-site: How should I configure the ipsec.conf files on both sites to get the tunnel up?
What I am trying to do is to create a site-to-site IPsec VPN between my network and my friend's network. We both have a router and two computers on each router, with all computers running Linux. So I ...
1
vote
0answers
55 views
Cisco with site-to-site and EzVPN - configuration Issue
This is the first time for me to work with Cisco Router.
The below mentioned is my configuration where
Cisco Srv is Cisco 7200 Series Router
XYZ is one VPN Server running on Linux.
RAC is ...
0
votes
1answer
124 views
Just how slow should my VPN be?
I have a VPN setup between a remote office with 2 ADSL connections (8Mb downstream, 512Kb upstream) and a main office with a 10Mb EFM connection (10Mb both up and down).
The VPN is an IPSec ...
1
vote
2answers
42 views
Connecting multiple lans by VPN
Our customer has about 10 different offices.
Head office has a router which maintains IPSec VPN connections to all of the site.
Each site has their own IP range, eg..
192.168.50.x
192.168.60.x
...
3
votes
0answers
237 views
L2TP/IPSec from Windows 7 to ASA 5520
I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
2
votes
3answers
127 views
How do I encrypt SQL Server traffic with IPSEC?
I've found all sorts of documentation on what IPSEC is and how to (in very non-specific ways) configure it, but I can't seem to configure a Windows Firewall With Advanced Security rule that both A) ...
1
vote
0answers
32 views
Disable Certificate Revocation in vyatta ipsec vpn
I have a problem where the VPN on a road warrior configuration.
our windows hosts work fine.
our mac's don't work so well.
Errors from StrongSwan:
ocsp status is stale or not in cache
crl not ...
1
vote
0answers
493 views
Debian squeeze as L2TP/IPSec gateway for Android devices
I'm trying to configure Debian squeeze as L2TP/IPSec VPN for Android devices, but with no great success.
So far I have done following:
Successfully configured Debian with openswan implementation of ...
0
votes
1answer
109 views
Pfsense IPsec VPN not listening on port 500?
I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
5
votes
1answer
309 views
ASA site-to-site IPSec vpn to linux ipsec-tools endpoints stops working after a random period of time
We swapped to ASA's over the weekend, and we replaced our VPN infrastructure which was previously based on openvpn and are now using IPSec between our ASA 5520's and our other sites that have linux ...
1
vote
0answers
47 views
L2TP/IPSec Tunnel to Virtual Network Interface
How do I set up a virtual network interface in Ubuntu so that OpenSWAN will happily forward packets between a remote mobile subnet and sockets on the local virtual device?
This is my infrastructure:
...
-4
votes
1answer
72 views
How to drop RST packets?
Is it possible to filter all outgoing TCP packets with RST flag on Windows Server 2003 using IPSec utility from "Support tools"?
Article: http://support.microsoft.com/kb/813878
0
votes
0answers
27 views
IPSec-tools (Racoon) user bandwidth accounting possible?
Is possible to log VPN user's bandwidth, I know it's possible with iptables, but racoon seems can log user's bandwidth, by setkey -D, IPsec SA have a byte counter.
Is there any doc about racoon's ...
0
votes
0answers
201 views
L2TP/IPsec VPN - Error 789
I want to use an L2TP/IPsec VPN while I'm at university to get a fixed IP, some more privacy and speed up DNS resolution.
I am able to connect to VPNHQ's VPN IPSec/L2TP service just fine, and I'm ...
2
votes
2answers
202 views
Problems with ipsec betwen Cisco ASA 5505 and Juniper ssg5
I am trying to set up an ipsec tunnel between our ASA 5505 and a Juniper ssg5.
The tunnel is up and running, but I cannot get any data through it.
The local network I am on is 172.16.1.0 and the ...
1
vote
1answer
137 views
VPN iptables Forwarding: Net-to-net
I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network.
Currently, the ...
0
votes
0answers
105 views
NETKEY IPsec and ARP
I'm wondering if I have the correct routing setup for an IPsec tunnel. I have control over the IPsec endpoints and the hosts connected to one side. These hosts are connecting to the tunnel so that ...
0
votes
0answers
261 views
IPsec VPN tunnel between Windows 2008 R2 and CISCO ASA?
I need to create a VPN IPsec tunnel between my Windows 2008 R2 server and a CISCO ASA device.
I want my server to be both the end of the tunnel, and the server that connects to the other side (no ...
0
votes
1answer
64 views
How to test if a vpn has been established correctly between two pc's?
I'm trying to connect two pc's using IPsec and StrongSwan.
The first pc, which I want it to be the server runs openSUSE and the client pc runs Fedora.
So after installing StrongSwan in the first pc ...
1
vote
0answers
64 views
Cisco RV220W ipsec with wrong ip packets
I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip.
The vpn tunnel is ...
0
votes
0answers
105 views
XL2TPd & IPsec Connectivity
I've setup xl2tpd and openswan (L2TP over IPsec) and my MacBook Pro and iPhone can connect just fine. The problem is, there's no internet access, only local.
Is there some iptables rule that I have ...
1
vote
0answers
55 views
SMB over IPSec prompting for credentials
I am trying to connect our web server to customers SQL/file server through a VPN tunnel. Originally we had setup a PPTP VPN and I was able to access their file shares without issue.
Since PPTP ...
2
votes
1answer
61 views
Is it possible to connect two IPSec site-to-site VPNs to one Windows 2008 Server?
I need to connect to two IPSEC site to site vpns from a Windows 2008 Server at the same time. Is it posible?
I tried to assign two IP Security Policies, but it seems I can only have one assigned at ...
0
votes
0answers
280 views
How do I configure OpenSwan to allow pure IPsec (not L2TP) connections from an iPhone?
Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys ...
0
votes
0answers
79 views
Connect to Cisco IPSec VPN on windows 7 for complete beginner
I'd like to set up the connection to my company's VPN from home. They give me certain pieces of info, which I think should be enough to establish the connection. So I have the username/password, ...
0
votes
1answer
87 views
Windows 7 + IPSec: Force all remote traffic through VPN
I have set up a VPN connection to an remote L2TP/IPSec VPN server, which works fine.
Now i like to ensure that all remote traffic is being routed through this VPN, so if the VPN connection drops, no ...
1
vote
1answer
42 views
Changing an IPSec pre-shared key without bringing down the tunnel (too long)
How do you advise changing an IPSec L2L VPN pre-shared key with respect to minimizing downtime? Is there any magic formula for this, or best practice, or do you just kind of try to change it on both ...
1
vote
0answers
53 views
configuring IPsec with IPV6
I am working with racoon tool and ipsec-tools and I have been able to connect two devices with IPSEC working in transport mode. However, I did it with IPv4 addresses and when I change them to IPV6 ...
1
vote
0answers
186 views
Cisco ASA - Duplicate ISAKMP SA - REKEYs
I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs.
(in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
0
votes
0answers
42 views
Linux IPSEC Setup
I am doing some testing of using IPSEC to have a few remote locations to be able to communicate to a central location. Below is my setkey.conf file.
#!/usr/sbin/setkey -f
# Configuration for ...
0
votes
0answers
92 views
IPSec roadwarrior configuration problems with Racoon
I am trying to setup IPSec connection between two machines using the Roadwarrior configuration defined here IPSec Manual (http://www.ipsec-howto.org/x304.html), because both machines don't have a ...
2
votes
2answers
85 views
TCP Reverse Proxy through VPN
I have a rather odd situation, but it's simple, I swear. I have a server (we'll call it host A) that's connected up to the internet and I use for some websites and other odds and ends. I have another ...
1
vote
0answers
353 views
IPSec VPN login failing with certificate authentication
I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
0
votes
1answer
156 views
IPSec VPN access to VPS
I would like to be able to be able to tunnel a local IP address (i.e 192.168.1.211) through my router that supports IPSec to a remote VPS (i.e. 106.187.34.207). Network map is here: ...
1
vote
1answer
53 views
Linux networking and routing
I have 3 networks:
192.168.1.0/24
192.168.11.0/24
192.168.50.0/24
192.168.1.0/24 and 192.168.11.0/24 are connected to each other through an IPSec tunnel, and 192.168.11.0/24 and 192.168.50.0/24 are ...
0
votes
1answer
83 views
IPSec Tunnel via Shared band using local IP instead of external
We have recently moved onto Shared Band which is causing us some issues. We have a direct Ip Address Mapping which maps our External Address down to our internal address set on the router (which ...
0
votes
1answer
68 views
Linux IPSec Tunnels does not forward IP Packet with ECN bit set to CE (Congestion Experienced)
I have a Linux IPSec Tunnel between a GGSN of a network operator and our data center. The IPSec works fine for all traffic but IP Packets coming from our side and are marked with ECN bit set to 0x3 ...
0
votes
0answers
166 views
ISAKMP IPSEC CentOS SITE to SITE IPSEC VPN
Today I got these parameters from a client:
PHASE1 (ISAKMP):
encryption algorithm: 3DES
hash algorithm: Secure Hash Standard
authentication method: Pre-Shared Key
Diffie-Hellman group: #2 ...
0
votes
0answers
146 views
L2TP over IPSec on Debian
I've configured the IPSec and XL2TPd daemons properly, both boot fine. At the moment, the issue I'm having is I get this message.
ipsec_setup: multiple ip addresses, using 127.0.0.2 on venet0
...
0
votes
1answer
70 views
IPSec Connection Ports
i configured a VPN server with IPSec to surfe secure at public networks. At generally it works. Now i would like to access my vpn server from my campus. Here i can't get any connection.
I know, that ...
1
vote
1answer
120 views
Add Port Forward to ASA5505 with IPSEC Tunnel
I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ...
1
vote
1answer
126 views
pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share
I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
0
votes
1answer
187 views
ASA IPSec tunnel up, but logging errors?
I am getting the following errors on an ASA;
Jan 24 2012 17:15:13 ASA1 : %ASA-7-714003: IP = 1.2.3.4, IKE Responder starting QM: msg id = 5293ff7c
Jan 24 2012 17:15:13 ASA1 : %ASA-7-713236: IP = ...
0
votes
0answers
562 views
Can't get the L2TP IPSEC up and running
i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. ...
